Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1239
Reference (s):
- https://bugs.chromium.org/p/chromium/issues/detail?id=430891
- https://bugs.chromium.org/p/chromium/issues/detail?id=457493
- MLIST:[debian-lts-announce] 20180719 [SECURITY] [DLA 1433-1] openjpeg2 security update
- URL: https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html