CVE-2016-5157: Buffer Overflow
Heap-based buffer overflow in the opjdwtinterleavev function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5157?
CVE-2016-5157 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2016-5157?
To fix CVE-2016-5157, update Google Chrome to version 53.0.2785.89 or later for Windows and OS X and version 53.0.2785.92 or later for Linux.
What software is affected by CVE-2016-5157?
CVE-2016-5157 affects OpenJPEG used within Google Chrome versions prior to 53.0.2785.89 on Windows and OS X and prior to 53.0.2785.92 on Linux.
What attack vectors are associated with CVE-2016-5157?
CVE-2016-5157 can be exploited by remote attackers through crafted JPEG 2000 data that contains malicious coordinate values.
Is CVE-2016-5157 specific to certain operating systems?
Yes, CVE-2016-5157 specifically impacts systems running on Windows, OS X, and Linux.