CVE-2016-5157: Fedoraproject Fedora

High severity, CVSS 8.8. EPSS: 4.7% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the opj_dwt_interleave_v function in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to execute arbitrary code via crafted coordinate values in JPEG 2000 data.

Affected products

• Fedoraproject Fedora: version 23 only; version 24 only; version 25 only
• Google Chrome: up to and including 52.0.2743.116
• Opensuse Leap: version 42.1 only

Published 2016-09-11. Last modified 2026-06-17.