This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2016-5157 →

DEBIAN-CVE-2016-5157

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Window...

Original description

The description as published by the source.

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 openjpeg2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1"}]}]

Debian:13 openjpeg2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1"}]}]

Debian:14 openjpeg2

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-1"}]}]

References

advisory security-tracker.debian.org