CVE-2016-5139

CVE-2016-5139 describes multiple integer overflows in the OpenJPEG library's opj_tcd_init_tile function, specifically impacting PDFium within Google Chrome versions prior to 52.0.2743.116. This vulnerability, triggered by crafted JPEG 2000 data, carries a high CVSS score of 7.6 due to its network-based attack vector, low attack complexity, and potential for a denial of service or other unspecified impacts. While there is no evidence of active exploitation (not in KEV or Hot List), and no public exploit code (Metasploit, Nuclei, ExploitDB), it garnered some community discussion and media coverage at the time of its disclosure.