Every CVE Search/ Get API key

CVE-2016-5152

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in...

8.8 HighFix available

CVE-2016-5152 is a high vulnerability (CVSS 8.8) in Google Chrome, published September 1, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.64%, the 76th percentile. Fixed in openjpeg2 2.1.2-1.2.

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.64%Down 1.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 8.8

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
CVE-2016-5152
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-190
Updated
2026-11-02
CVE List No score

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
CVE-2016-5152
Updated
2026-11-02
EUVDEUVD-2016-6103 No score

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
EUVD-2016-6103
Updated
2026-11-03
GitHub AdvisoriesGHSA-6465-qf4g-vrf7 8.8

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in...

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
GHSA-6465-qf4g-vrf7
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-190
Updated
2026-11-02
OSV 8.8

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
CVE-2016-5152
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-5152 8.8

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
DEBIAN-CVE-2016-5152
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 9 moreShow less
OSVRHSA-2016:1854 8.8

Red Hat Security Advisory: chromium-browser security update

Record
RHSA-2016:1854
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-5152 8.8

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
UBUNTU-CVE-2016-5152
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2016-0309 No score

Updated chromium-browser-stable packages fix security vulnerability

Blink, as used in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, mishandles deferred page loads, which allows remote attackers to inject arbitrary web script or HTML via a crafted web site, aka "Universal XSS (UXSS)." (CVE-2016-5147)

Cross-site scripting (XSS) vulnerability in Blink, as used in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML via vectors related to widget updates, aka "Universal XSS (UXSS)." (CVE-2016-5148)

The extensions subsystem in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux relies on an IFRAME source URL to identify an associated extension, which allows remote attackers to conduct extension-bindings injection attacks by leveraging script access to a resource that initially has the about:blank URL. (CVE-2016-5149)

WebKit/Source/bindings/modules/v8/V8BindingForModules.cpp in Blink, as used in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, has an Indexed Database (aka IndexedDB) API implementation that does not properly restrict key-path evaluation, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code that leverages certain side effects. (CVE-2016-5150)

PDFium in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux mishandles timers, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted PDF document, related to fpdfsdk/javascript/JS_Object.cpp and fpdfsdk/javascript/app.cpp. (CVE-2016-5151)

Integer overflow in the opj_tcd_get_decoded_tile_size function in tcd.c in OpenJPEG, as used in PDFium in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data. (CVE-2016-5152)

The Web Animations implementation in Blink, as used in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site. (CVE-2016-5153)

Multiple heap-based buffer overflows in PDFium, as used in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JBig2 image. (CVE-2016-5154)

Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux does not properly validate access to the initial document, which allows remote attackers to spoof the address bar via a crafted web site. (CVE-2016-5155)

extensions/renderer/event_bindings.cc in the event bindings in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux attempts to process filtered events after failure to add an event matcher, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors. (CVE-2016-5156)

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data. (CVE-2016-5157)

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Chromium before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data. (CVE-2016-5158) …

Record
MGASA-2016-0309
Updated
2026-11-02
OSVopenSUSE-SU-2016:2250-1 No score

Security update for Chromium

Chromium was updated to 53.0.2785.89 to fix a number of security issues.

The following vulnerabilities were fixed: (boo#996648)

  • CVE-2016-5147: Universal XSS in Blink.
  • CVE-2016-5148: Universal XSS in Blink.
  • CVE-2016-5149: Script injection in extensions.
  • CVE-2016-5150: Use after free in Blink.
  • CVE-2016-5151: Use after free in PDFium.
  • CVE-2016-5152: Heap overflow in PDFium.
  • CVE-2016-5153: Use after destruction in Blink.
  • CVE-2016-5154: Heap overflow in PDFium.
  • CVE-2016-5155: Address bar spoofing.
  • CVE-2016-5156: Use after free in event bindings.
  • CVE-2016-5157: Heap overflow in PDFium.
  • CVE-2016-5158: Heap overflow in PDFium.
  • CVE-2016-5159: Heap overflow in PDFium.
  • CVE-2016-5161: Type confusion in Blink.
  • CVE-2016-5162: Extensions web accessible resources bypass.
  • CVE-2016-5163: Address bar spoofing.
  • CVE-2016-5164: Universal XSS using DevTools.
  • CVE-2016-5165: Script injection in DevTools.
  • CVE-2016-5166: SMB Relay Attack via Save Page As.
  • CVE-2016-5160: Extensions web accessible resources bypass.

A number of tracked build system fixes are included. (boo#996032, boo#99606, boo#995932)

Record
openSUSE-SU-2016:2250-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10171-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11120-1 No score

libopenjp2-7-2.4.0-1.4 on GA media

These are all security issues fixed in the libopenjp2-7-2.4.0-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11120-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02
OSVSUSE-SU-2016:2250-1 No score

Security update for Chromium

Chromium was updated to 53.0.2785.89 to fix a number of security issues.

The following vulnerabilities were fixed: (boo#996648)

  • CVE-2016-5147: Universal XSS in Blink.
  • CVE-2016-5148: Universal XSS in Blink.
  • CVE-2016-5149: Script injection in extensions.
  • CVE-2016-5150: Use after free in Blink.
  • CVE-2016-5151: Use after free in PDFium.
  • CVE-2016-5152: Heap overflow in PDFium.
  • CVE-2016-5153: Use after destruction in Blink.
  • CVE-2016-5154: Heap overflow in PDFium.
  • CVE-2016-5155: Address bar spoofing.
  • CVE-2016-5156: Use after free in event bindings.
  • CVE-2016-5157: Heap overflow in PDFium.
  • CVE-2016-5158: Heap overflow in PDFium.
  • CVE-2016-5159: Heap overflow in PDFium.
  • CVE-2016-5161: Type confusion in Blink.
  • CVE-2016-5162: Extensions web accessible resources bypass.
  • CVE-2016-5163: Address bar spoofing.
  • CVE-2016-5164: Universal XSS using DevTools.
  • CVE-2016-5165: Script injection in DevTools.
  • CVE-2016-5166: SMB Relay Attack via Save Page As.
  • CVE-2016-5160: Extensions web accessible resources bypass.

A number of tracked build system fixes are included. (boo#996032, boo#99606, boo#995932)

Record
SUSE-SU-2016:2250-1
Updated
2026-11-02
OSVSUSE-SU-2016:2251-1 No score

Security update for Chromium

Chromium was updated to 53.0.2785.89 to fix a number of security issues.

The following vulnerabilities were fixed: (boo#996648)

  • CVE-2016-5147: Universal XSS in Blink.
  • CVE-2016-5148: Universal XSS in Blink.
  • CVE-2016-5149: Script injection in extensions.
  • CVE-2016-5150: Use after free in Blink.
  • CVE-2016-5151: Use after free in PDFium.
  • CVE-2016-5152: Heap overflow in PDFium.
  • CVE-2016-5153: Use after destruction in Blink.
  • CVE-2016-5154: Heap overflow in PDFium.
  • CVE-2016-5155: Address bar spoofing.
  • CVE-2016-5156: Use after free in event bindings.
  • CVE-2016-5157: Heap overflow in PDFium.
  • CVE-2016-5158: Heap overflow in PDFium.
  • CVE-2016-5159: Heap overflow in PDFium.
  • CVE-2016-5161: Type confusion in Blink.
  • CVE-2016-5162: Extensions web accessible resources bypass.
  • CVE-2016-5163: Address bar spoofing.
  • CVE-2016-5164: Universal XSS using DevTools.
  • CVE-2016-5165: Script injection in DevTools.
  • CVE-2016-5166: SMB Relay Attack via Save Page As.
  • CVE-2016-5160: Extensions web accessible resources bypass.

A number of tracked build system fixes are included. (boo#996032, boo#99606, boo#995932)

Record
SUSE-SU-2016:2251-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjpeg2
Debian:12
 before 2.1.2-1.2
2.1.2-1.2
openjpeg2
Debian:13
 before 2.1.2-1.2
2.1.2-1.2
openjpeg2
Debian:14
 before 2.1.2-1.2
2.1.2-1.2
chromium-browser
Debian:8
 before 53.0.2785.89-1~deb8u1, plus listed versions
41.0.2272.118-142.0.2311.135-142.0.2311.135-1~deb8u142.0.2311.135-242.0.2311.90-1
Show 45 moreShow less
42.0.2311.90-1~deb8u142.0.2311.90-243.0.2357.124-143.0.2357.124-243.0.2357.124-343.0.2357.130-143.0.2357.65-143.0.2357.65-1~deb8u143.0.2357.81-144.0.2403.107-144.0.2403.107-244.0.2403.157-144.0.2403.89-144.0.2403.89-1~deb8u145.0.2454.101-145.0.2454.85-145.0.2454.85-1~deb8u146.0.2490.13-146.0.2490.71-146.0.2490.71-1~deb8u147.0.2526.111-147.0.2526.16-147.0.2526.73-147.0.2526.73-1~deb8u147.0.2526.80-147.0.2526.80-1~deb8u147.0.2526.80-247.0.2526.80-348.0.2564.116-148.0.2564.116-1~deb8u148.0.2564.23-148.0.2564.82-148.0.2564.82-1~deb8u148.0.2564.82-249.0.2623.108-149.0.2623.108-1~deb8u149.0.2623.108-249.0.2623.75-149.0.2623.75-1~deb8u149.0.2623.75-249.0.2623.87-149.0.2623.87-1~deb8u150.0.2661.75-150.0.2661.75-1~deb8u150.0.2661.75-2
53.0.2785.89-1~deb8u1
openjpeg2
Debian:8
 before 2.1.0-2+deb8u3, plus listed versions
2.1.0-22.1.0-2+deb8u12.1.0-2+deb8u2
2.1.0-2+deb8u3
openjpeg2
Debian:9
 before 2.1.2-1.1+deb9u2, plus listed versions
2.1.2-1.12.1.2-1.1+deb9u1
2.1.2-1.1+deb9u2
chromium-browser-stable
Mageia:5
 before 53.0.2785.113-1.mga5
53.0.2785.113-1.mga5
chromium-browser
Red Hat:rhel_extras:6
 before 0:53.0.2785.89-3.el6
0:53.0.2785.89-3.el6
chromium-browser-debuginfo
Red Hat:rhel_extras:6
 before 0:53.0.2785.89-3.el6
0:53.0.2785.89-3.el6
chromium
SUSE:Package Hub 12
 before 53.0.2785.89-96.1
53.0.2785.89-96.1
Show 4 moreShow less
Affected packages
PackageAffectedFixed
chromium-browser
Ubuntu:14.04:LTS
 before 53.0.2785.143-0ubuntu0.14.04.1.1142, plus listed versions
29.0.1547.65-0ubuntu231.0.1650.63-0ubuntu1~20131204.132.0.1700.107-0ubuntu1~20140204.977.133.0.1750.152-0ubuntu1~pkg995.134.0.1847.116-0ubuntu2
Show 22 moreShow less
36.0.1985.125-0ubuntu1.14.04.0~pkg102937.0.2062.94-0ubuntu0.14.04.1~pkg104237.0.2062.120-0ubuntu0.14.04.1~pkg104938.0.2125.111-0ubuntu0.14.04.1.106139.0.2171.65-0ubuntu0.14.04.1.106440.0.2214.94-0ubuntu0.14.04.1.106840.0.2214.111-0ubuntu0.14.04.1.106941.0.2272.76-0ubuntu0.14.04.1.107643.0.2357.81-0ubuntu0.14.04.1.108943.0.2357.130-0ubuntu0.14.04.1.109244.0.2403.89-0ubuntu0.14.04.1.109545.0.2454.85-0ubuntu0.14.04.1.109745.0.2454.101-0ubuntu0.14.04.1.109947.0.2526.73-0ubuntu0.14.04.1.110647.0.2526.106-0ubuntu0.14.04.1.110748.0.2564.82-0ubuntu0.14.04.1.110848.0.2564.116-0ubuntu0.14.04.1.111149.0.2623.87-0ubuntu0.14.04.1.111249.0.2623.108-0ubuntu0.14.04.1.111350.0.2661.102-0ubuntu0.14.04.1.111751.0.2704.79-0ubuntu0.14.04.1.112152.0.2743.116-0ubuntu0.14.04.1.1134
53.0.2785.143-0ubuntu0.14.04.1.1142
chromium-browser
Ubuntu:16.04:LTS
 before 53.0.2785.143-0ubuntu0.16.04.1.1254, plus listed versions
45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229
Show 5 moreShow less
49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.124252.0.2743.116-0ubuntu0.16.04.1.1250
53.0.2785.143-0ubuntu0.16.04.1.1254
chromium
openSUSE:Tumbleweed
 before 55.0.2883.75-3.1
55.0.2883.75-3.1
chromium
openSUSE:Tumbleweed
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 15 versions, 2,266 references and the rest of 1 source description. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open