CVE-2016-5140

Critical

Published: 07/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, affecting service availability. Additionally, there is a risk of unspecified impacts that could threaten data security.

Recommendation

It is recommended to update Google Chrome to version 52.0.2743.116 or later to mitigate this vulnerability. Also, monitor and analyze network traffic for potential attack attempts.

Original NVD description (English source)

Heap-based buffer overflow in the opj_j2k_read_SQcd_SQcc function in j2k.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JPEG 2000 data.