CVE-2016-1651: Infoleak
fxcodec/codec/fxcodecjpxopj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420torgb and sycc422torgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted JPEG 2000 data in a PDF document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1651?
CVE-2016-1651 is rated as a medium severity vulnerability due to potential information disclosure and denial of service risks.
How do I fix CVE-2016-1651?
To fix CVE-2016-1651, you should update Google Chrome to version 50.0.2661.75 or newer.
What types of systems are affected by CVE-2016-1651?
CVE-2016-1651 affects Google Chrome versions prior to 50.0.2661.75, as well as certain Debian and SUSE Linux distributions.
Can CVE-2016-1651 be exploited remotely?
Yes, CVE-2016-1651 can be exploited by remote attackers to read sensitive information from process memory.
Is there a known workaround for CVE-2016-1651?
There are no known workarounds for CVE-2016-1651; the best mitigation is to apply the necessary updates.