CVE-2015-1239
Fixed in a distro release EPSS 1%
Double free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.
Products: google chrome, uclouvain openjpeg, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | chromium | no fix |
| Chainguard | chromium-docker-selenium-compat | no fix |
| Chainguard | chromium-lang | no fix |
| Chainguard | openjpeg | 0 |
| Debian 12 | openjpeg2 | 2.1.1-1 |
| Debian 13 | openjpeg2 | 2.1.1-1 |
| Debian 14 | openjpeg2 | 2.1.1-1 |
| Debian 8 | openjpeg2 | 2.1.0-2+deb8u4 |
| SUSE Linux Enterprise Desktop 12 SP3 | openjpeg2 | 2.1.0-4.9.1 |
| SUSE Linux Enterprise Server 12 SP3 | openjpeg2 | 2.1.0-4.9.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | openjpeg2 | 2.1.0-4.9.1 |
| Ubuntu 16.04 LTS | openjpeg2 | 2.1.2-1.1+deb9u2build0.1 |
| Wolfi | chromium | no fix |
| Wolfi | chromium-docker-selenium-compat | no fix |
| Wolfi | chromium-lang | no fix |
| Wolfi | openjpeg | 0 |