CVE-2016-1628: Debian Linux
Medium severity, CVSS 6.3. EPSS: 1.9% chance of exploitation in the next 30 days.
pi.c in OpenJPEG, as used in PDFium in Google Chrome before 48.0.2564.109, does not validate a certain precision value, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted JPEG 2000 image in a PDF document, related to the opj_pi_next_rpcl, opj_pi_next_pcrl, and opj_pi_next_cprl functions.
Affected products
Published 2016-02-21. Last modified 2026-06-17.