CVE-2016-1645

CVE-2016-1645 describes multiple integer signedness errors in the OpenJPEG library, specifically within the opj_j2k_update_image_data function, as integrated into PDFium in Google Chrome versions prior to 49.0.2623.87. This vulnerability allows remote attackers to trigger a denial of service (incorrect cast and out-of-bounds write) or potentially achieve other unspecified impacts through specially crafted JPEG 2000 data. Rated with a CVSSv3 score of 8.8 (High), this vulnerability has a network attack vector, low attack complexity, and high potential impact on confidentiality, integrity, and availability, requiring user interaction. Its FAUCET Risk Score is 73/100. There is no evidence of active exploitation (not in KEV), and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. While there is limited community discussion and media coverage, the vulnerability is considered inactive.