CVE-2015-6581
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2015-6581
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2015-6581.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2015-6581
- Downstream
- Related
- Published
- 2015-09-03T22:59:14Z
- Modified
- 2025-08-09T19:01:27Z
- Summary
- [none]
- Details
-
Double free vulnerability in the opjj2kcopydefaulttcpandcreate_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure.
- References
-
- http://www.debian.org/security/2016/dsa-3665
- http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168736.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169258.html
- http://www.securitytracker.com/id/1033472
- https://code.google.com/p/chromium/issues/detail?id=486538
- https://code.google.com/p/chromium/issues/detail?id=526825
- https://code.google.com/p/openjpeg/issues/detail?id=492