Integer overflow in the opjtcdgetdecodedtile_size function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JPEG 2000 data.
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-browser"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-browser-l10n"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-chromedriver"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-codecs-ffmpeg"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.14.04.1.1142",
"binary_name": "chromium-codecs-ffmpeg-extra"
}
]
}
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-browser"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-browser-l10n"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-chromedriver"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-codecs-ffmpeg"
},
{
"binary_version": "53.0.2785.143-0ubuntu0.16.04.1.1254",
"binary_name": "chromium-codecs-ffmpeg-extra"
}
]
}