CVE-2015-6581
- Source
- https://cve.org/CVERecord?id=CVE-2015-6581
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2015-6581.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2015-6581
- Downstream
- Related
- Withdrawn
- 2026-01-27T04:14:00.706437Z
- Published
- 2015-09-03T22:59:14Z
- Modified
- 2026-01-27T04:14:00.706437Z
- Summary
- [none]
- Details
-
Double free vulnerability in the opjj2kcopydefaulttcpandcreate_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure.
- References
-
- http://www.debian.org/security/2016/dsa-3665
- http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168736.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169258.html
- http://www.securitytracker.com/id/1033472
- https://code.google.com/p/chromium/issues/detail?id=486538
- https://code.google.com/p/chromium/issues/detail?id=526825
- https://code.google.com/p/openjpeg/issues/detail?id=492