CVE-2016-5159

openjpeg: heap overflow in parsing of JPEG2000 code blocks

Loading…

Severity

Important

Red Hat Product Security

8.8

CVSS 3.0

Review impact separately from score.

Published · August 31, 2016

Updated · June 28, 2026

Description

An integer overflow, leading to a heap buffer overflow, was found in openjpeg, also affecting the PDF viewer in Chromium. A specially crafted JPEG2000 image could cause an incorrect calculation when allocating memory for code blocks, which could lead to a crash, or potentially, code execution.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.0 · 8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS 2.0 · 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-190 · Integer Overflow or Wraparound