CVE-2016-5152

CVE-2016-5152 is an integer overflow vulnerability in the OpenJPEG library, specifically within the opj_tcd_get_decoded_tile_size function, impacting Google Chrome and OpenSUSE products. This flaw allows remote attackers to trigger a heap-based buffer overflow, leading to a denial of service or potentially other unspecified impacts, through specially crafted JPEG 2000 data. Rated with a CVSS score of 8.8 (High), it requires user interaction (UI:R) but has low attack complexity (AC:L) and can result in high confidentiality, integrity, and availability impacts. While the vulnerability has a high risk score and some community discussion, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB.