CVE-2015-1239

Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - chrome-cve-admin@google.com

Published

2017-10-18

Last modified

2026-10-08

Weaknesses

CWE-415

Affected products

• Debian Linux (Debian)
• Chrome (Google)
• Openjpeg (Uclouvain)

References

• https://lists.debian.org/debian-lts-announce/2018/07/msg00025.html
• https://bugs.chromium.org/p/chromium/issues/detail?id=457493
• https://bugs.chromium.org/p/chromium/issues/detail?id=430891