Every CVE Search/ Get API key

CVE-2016-5139

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in...

7.6 HighFix available

CVE-2016-5139 is a high vulnerability (CVSS 7.6) in Google Chrome, published August 7, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.28%, the 70th percentile. Fixed in openjpeg2 2.1.2-1.

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
High

Exploit likelihood

1.28%Down 2.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.6

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
CVE-2016-5139
CVSS 3.0
7.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
CVE-2016-5139
Updated
2026-11-02
EUVDEUVD-2016-6090 No score

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
EUVD-2016-6090
Updated
2026-11-03
GitHub AdvisoriesGHSA-gmg5-8m74-xp62 7.6

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in...

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
GHSA-gmg5-8m74-xp62
CVSS 3.0
7.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Weakness
CWE-119
Updated
2026-11-02
OSV 7.6

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
CVE-2016-5139
CVSS 3.0
7.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-5139 7.6

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
DEBIAN-CVE-2016-5139
CVSS 3.0
7.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Updated
2026-11-02
Show 11 moreShow less
OSVRHSA-2016:1580 8.8

Red Hat Security Advisory: chromium-browser security update

Record
RHSA-2016:1580
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:0559 8.8

Red Hat Security Advisory: openjpeg security update

Record
RHSA-2017:0559
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2017:0838 8.8

Red Hat Security Advisory: openjpeg security update

Record
RHSA-2017:0838
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2016-5139 7.6

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.

Record
UBUNTU-CVE-2016-5139
CVSS 3.0
7.6 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVMGASA-2016-0279 No score

Updated chromium-browser-stable packages fix security vulnerability

Chromium-browser-stable 52.0.2743.116 fixes security issues: two heap overflow issues in pdfium (CVE-2016-5139 and CVE-2016-5140); an address bar spoofing problem (CVE-2016-5141); a use-after-free bug (CVE-2016-5142) and a same origin bypass problem (CVE-2016-5145) in blink; two parameter sanitization failures in DevTools (CVE-2016-5143 and CVE-2016-5144); and various fixes from upstream's internal audits, fuzzing, and other initiatives (CVE-2016-5146).

Record
MGASA-2016-0279
Updated
2026-11-02
OSVMGASA-2017-0122 No score

Updated openjpeg packages fix security vulnerability

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data. (CVE-2016-5139)

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data. (CVE-2016-5158)

Multiple integer overflows in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allow remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data that is mishandled during opj_aligned_malloc calls in dwt.c and t1.c. (CVE-2016-5159)

Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write. (CVE-2016-7163)

An out-of-bounds read vulnerability was found in OpenJPEG, in the j2k_to_image tool. Converting a specially crafted JPEG2000 file to another format could cause the application to crash or, potentially, disclose some data from the heap. (CVE-2016-9573

Record
MGASA-2017-0122
Updated
2026-11-02
OSVopenSUSE-SU-2016:1982-1 No score

Security update for Chromium

Chromium was updated to 52.0.2743.116 to fix the following security issues: (boo#992305)

  • CVE-2016-5141: Address bar spoofing (boo#992314)
  • CVE-2016-5142: Use-after-free in Blink (boo#992313)
  • CVE-2016-5139: Heap overflow in pdfium (boo#992311)
  • CVE-2016-5140: Heap overflow in pdfium (boo#992310)
  • CVE-2016-5145: Same origin bypass for images in Blink (boo#992320)
  • CVE-2016-5143: Parameter sanitization failure in DevTools (boo#992319)
  • CVE-2016-5144: Parameter sanitization failure in DevTools (boo#992315)
  • CVE-2016-5146: Various fixes from internal audits, fuzzing and other initiatives (boo#992309)
Record
openSUSE-SU-2016:1982-1
Updated
2026-11-02
OSVopenSUSE-SU-2016:1983-1 No score

Security update for Chromium

Chromium was updated to 52.0.2743.116 to fix the following security issues: (boo#992305)

  • CVE-2016-5141: Address bar spoofing (boo#992314)
  • CVE-2016-5142: Use-after-free in Blink (boo#992313)
  • CVE-2016-5139: Heap overflow in pdfium (boo#992311)
  • CVE-2016-5140: Heap overflow in pdfium (boo#992310)
  • CVE-2016-5145: Same origin bypass for images in Blink (boo#992320)
  • CVE-2016-5143: Parameter sanitization failure in DevTools (boo#992319)
  • CVE-2016-5144: Parameter sanitization failure in DevTools (boo#992315)
  • CVE-2016-5146: Various fixes from internal audits, fuzzing and other initiatives (boo#992309)
Record
openSUSE-SU-2016:1983-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10171-1 No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10171-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11120-1 No score

libopenjp2-7-2.4.0-1.4 on GA media

These are all security issues fixed in the libopenjp2-7-2.4.0-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11120-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12948-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjpeg2
Debian:12
 before 2.1.2-1
2.1.2-1
openjpeg2
Debian:13
 before 2.1.2-1
2.1.2-1
openjpeg2
Debian:14
 before 2.1.2-1
2.1.2-1
openjpeg2
Debian:8
 before 2.1.0-2+deb8u4, plus listed versions
2.1.0-22.1.0-2+deb8u12.1.0-2+deb8u22.1.0-2+deb8u3
2.1.0-2+deb8u4
chromium-browser
Debian:8
 before 52.0.2743.116-1~deb8u1, plus listed versions
41.0.2272.118-142.0.2311.135-142.0.2311.135-1~deb8u142.0.2311.135-242.0.2311.90-1
Show 45 moreShow less
42.0.2311.90-1~deb8u142.0.2311.90-243.0.2357.124-143.0.2357.124-243.0.2357.124-343.0.2357.130-143.0.2357.65-143.0.2357.65-1~deb8u143.0.2357.81-144.0.2403.107-144.0.2403.107-244.0.2403.157-144.0.2403.89-144.0.2403.89-1~deb8u145.0.2454.101-145.0.2454.85-145.0.2454.85-1~deb8u146.0.2490.13-146.0.2490.71-146.0.2490.71-1~deb8u147.0.2526.111-147.0.2526.16-147.0.2526.73-147.0.2526.73-1~deb8u147.0.2526.80-147.0.2526.80-1~deb8u147.0.2526.80-247.0.2526.80-348.0.2564.116-148.0.2564.116-1~deb8u148.0.2564.23-148.0.2564.82-148.0.2564.82-1~deb8u148.0.2564.82-249.0.2623.108-149.0.2623.108-1~deb8u149.0.2623.108-249.0.2623.75-149.0.2623.75-1~deb8u149.0.2623.75-249.0.2623.87-149.0.2623.87-1~deb8u150.0.2661.75-150.0.2661.75-1~deb8u150.0.2661.75-2
52.0.2743.116-1~deb8u1
chromium-browser-stable
Mageia:5
 before 52.0.2743.116-1.mga5
52.0.2743.116-1.mga5
openjpeg
Mageia:5
 before 1.5.2-5.2.mga5
1.5.2-5.2.mga5
chromium-browser
Red Hat:rhel_extras:6
 before 0:52.0.2743.116-1.el6
0:52.0.2743.116-1.el6
chromium-browser-debuginfo
Red Hat:rhel_extras:6
 before 0:52.0.2743.116-1.el6
0:52.0.2743.116-1.el6
openjpeg
Red Hat:enterprise_linux:6::client
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
Show 37 moreShow less
Affected packages
PackageAffectedFixed
openjpeg-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-libs
Red Hat:enterprise_linux:6::client
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-devel
Red Hat:enterprise_linux:6::client
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg
Red Hat:enterprise_linux:6::computenode
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-libs
Red Hat:enterprise_linux:6::computenode
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-devel
Red Hat:enterprise_linux:6::computenode
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg
Red Hat:enterprise_linux:6::server
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-libs
Red Hat:enterprise_linux:6::server
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-devel
Red Hat:enterprise_linux:6::server
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg
Red Hat:enterprise_linux:6::workstation
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-libs
Red Hat:enterprise_linux:6::workstation
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg-devel
Red Hat:enterprise_linux:6::workstation
 before 0:1.3-16.el6_8
0:1.3-16.el6_8
openjpeg
Red Hat:enterprise_linux:7::client
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-debuginfo
Red Hat:enterprise_linux:7::client
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-libs
Red Hat:enterprise_linux:7::client
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-devel
Red Hat:enterprise_linux:7::client
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg
Red Hat:enterprise_linux:7::computenode
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-debuginfo
Red Hat:enterprise_linux:7::computenode
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-libs
Red Hat:enterprise_linux:7::computenode
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-devel
Red Hat:enterprise_linux:7::computenode
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg
Red Hat:enterprise_linux:7::server
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-debuginfo
Red Hat:enterprise_linux:7::server
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-libs
Red Hat:enterprise_linux:7::server
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-devel
Red Hat:enterprise_linux:7::server
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg
Red Hat:enterprise_linux:7::workstation
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-debuginfo
Red Hat:enterprise_linux:7::workstation
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-libs
Red Hat:enterprise_linux:7::workstation
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
openjpeg-devel
Red Hat:enterprise_linux:7::workstation
 before 0:1.5.1-16.el7_3
0:1.5.1-16.el7_3
chromium-browser
Ubuntu:14.04:LTS
 before 52.0.2743.116-0ubuntu0.14.04.1.1134, plus listed versions
29.0.1547.65-0ubuntu231.0.1650.63-0ubuntu1~20131204.132.0.1700.107-0ubuntu1~20140204.977.133.0.1750.152-0ubuntu1~pkg995.134.0.1847.116-0ubuntu2
Show 21 moreShow less
36.0.1985.125-0ubuntu1.14.04.0~pkg102937.0.2062.94-0ubuntu0.14.04.1~pkg104237.0.2062.120-0ubuntu0.14.04.1~pkg104938.0.2125.111-0ubuntu0.14.04.1.106139.0.2171.65-0ubuntu0.14.04.1.106440.0.2214.94-0ubuntu0.14.04.1.106840.0.2214.111-0ubuntu0.14.04.1.106941.0.2272.76-0ubuntu0.14.04.1.107643.0.2357.81-0ubuntu0.14.04.1.108943.0.2357.130-0ubuntu0.14.04.1.109244.0.2403.89-0ubuntu0.14.04.1.109545.0.2454.85-0ubuntu0.14.04.1.109745.0.2454.101-0ubuntu0.14.04.1.109947.0.2526.73-0ubuntu0.14.04.1.110647.0.2526.106-0ubuntu0.14.04.1.110748.0.2564.82-0ubuntu0.14.04.1.110848.0.2564.116-0ubuntu0.14.04.1.111149.0.2623.87-0ubuntu0.14.04.1.111249.0.2623.108-0ubuntu0.14.04.1.111350.0.2661.102-0ubuntu0.14.04.1.111751.0.2704.79-0ubuntu0.14.04.1.1121
52.0.2743.116-0ubuntu0.14.04.1.1134
chromium-browser
Ubuntu:16.04:LTS
 before 52.0.2743.116-0ubuntu0.16.04.1.1250, plus listed versions
45.0.2454.101-0ubuntu1.120147.0.2526.73-0ubuntu1.121847.0.2526.106-0ubuntu1.122148.0.2564.82-0ubuntu1.122248.0.2564.116-0ubuntu1.1229
Show 4 moreShow less
49.0.2623.87-0ubuntu1.123249.0.2623.108-0ubuntu1.123350.0.2661.102-0ubuntu0.16.04.1.123751.0.2704.79-0ubuntu0.16.04.1.1242
52.0.2743.116-0ubuntu0.16.04.1.1250
openjpeg2
Ubuntu:16.04:LTS
 before 2.1.2-1.1+deb9u2build0.1, plus listed versions
2.1.0-2.12.1.0-2.1ubuntu0.1
2.1.2-1.1+deb9u2build0.1
chromium
SUSE:Package Hub 12
 before 52.0.2743.116-92.1
52.0.2743.116-92.1
chromium
openSUSE:Tumbleweed
 before 55.0.2883.75-3.1
55.0.2883.75-3.1
chromium
openSUSE:Tumbleweed
 before 113.0.5672.92-1.1
113.0.5672.92-1.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 12 versions and 2,246 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open