Multiple integer overflows in the (1) sycc422torgb and (2) sycc444torgb functions in fxcodec/codec/fxcodecjpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.