CVE-2016-1681

CVE-2016-1681 describes a heap-based buffer overflow in the OpenJPEG library, specifically within the opj_j2k_read_SPCod_SPCoc function, as integrated into PDFium in Google Chrome versions prior to 51.0.2704.63. This vulnerability allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts through a specially crafted PDF document. Rated with a CVSS score of 8.8 (High), this flaw is remotely exploitable with low attack complexity, requiring user interaction. Successful exploitation could lead to high impacts on confidentiality, integrity, and availability. While there is no evidence of active exploitation (not in KEV or Hot List) and no public exploit code available (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating notable attention from security researchers.