CVE-2015-1273

CVE-2015-1273 describes a heap-based buffer overflow in the OpenJPEG library (j2k.c) prior to r3002, specifically impacting PDFium as used in Google Chrome before version 44.0.2403.89, as well as other products like Debian and Red Hat. This vulnerability allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts by providing malformed JPEG2000 data within a PDF document. With a CVSS score of 6.8, it is considered medium severity, requiring medium attack complexity but potentially leading to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, though it has garnered some community discussion and media coverage.