CVE-2016-1651

EUVD-2016-2746
fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via crafted JPEG 2000 data in a PDF document.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
≤ 49.0.2623.112
debiandebian_linux
8.0
opensuseleap
42.1
suselinux_enterprise
12.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
precise
ignored
trusty
Fixed 50.0.2661.102-0ubuntu0.14.04.1.1117
released
wily
Fixed 50.0.2661.102-0ubuntu0.15.10.1.1227
released
xenial
Fixed 50.0.2661.102-0ubuntu0.16.04.1.1237
released
oxide-qt
precise
dne
trusty
dne
wily
not-affected
xenial
not-affected
Common Weakness Enumeration
References
http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html
http://rhn.redhat.com/errata/RHSA-2016-0638.html
http://www.debian.org/security/2016/dsa-3549
http://zerodayinitiative.com/advisories/ZDI-16-243/
https://codereview.chromium.org/1837383011
https://crbug.com/591785
https://security.gentoo.org/glsa/201605-02
http://googlechromereleases.blogspot.com/2016/04/stable-channel-update_13.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00040.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00041.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00049.html
http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00050.html
http://rhn.redhat.com/errata/RHSA-2016-0638.html
http://www.debian.org/security/2016/dsa-3549
http://zerodayinitiative.com/advisories/ZDI-16-243/
https://codereview.chromium.org/1837383011
https://crbug.com/591785
https://security.gentoo.org/glsa/201605-02