Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Chrome | * | 44.0.2403 (including) | |
| Chromium-browser | Ubuntu | artful | * |
| Chromium-browser | Ubuntu | bionic | * |
| Chromium-browser | Ubuntu | devel | * |
| Chromium-browser | Ubuntu | precise | * |
| Chromium-browser | Ubuntu | trusty | * |
| Chromium-browser | Ubuntu | upstream | * |
| Chromium-browser | Ubuntu | vivid | * |
| Chromium-browser | Ubuntu | wily | * |
| Chromium-browser | Ubuntu | xenial | * |
| Chromium-browser | Ubuntu | yakkety | * |
| Chromium-browser | Ubuntu | zesty | * |
| Openjpeg | Ubuntu | precise | * |
| Openjpeg | Ubuntu | vivid | * |
| Openjpeg | Ubuntu | wily | * |
| Openjpeg | Ubuntu | yakkety | * |