How severe is CVE-2016-1619?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.6 out of 10.

What type of vulnerability is CVE-2016-1619?

This is classified as CWE-119, which is a common weakness in software security.

CVE-2016-1619 - HIGH Severity | CVSS 7.6

Vulnerability Description

Multiple integer overflows in the (1) sycc422_to_rgb and (2) sycc444_to_rgb functions in fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted PDF document.

Related Vulnerabilities

CVE-2015-5343

HIGH

CVSS:7.6(High)

Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows remote authenticated users to cause a denial of service (subversion server cras...

CWE-1192015

CVE-2015-8947

HIGH

CVSS:7.6(High)

hb-ot-layout-gpos-table.hh in HarfBuzz before 1.0.5 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data, a different vuln...

CWE-1192015

CVE-2016-5139

HIGH

CVSS:7.6(High)

Multiple integer overflows in the opj_tcd_init_tile function in tcd.c in OpenJPEG, as used in PDFium in Google Chrome before 52.0.2743.116, allow remote attackers to cause a denial of service (heap-ba...

CWE-1192016

CVE-2018-12191

HIGH

CVSS:7.6(High)

Bounds check in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or Intel(R) Server Platform Services before versions 4.00.04.383 or SPS 4.01.02.174, or Intel(R) T...

CWE-1192018

CVE-2018-12208

HIGH

CVSS:7.6(High)

Buffer overflow in HECI subsystem in Intel(R) CSME before versions 11.8.60, 11.11.60, 11.22.60 or 12.0.20 and Intel(R) TXE version before 3.1.60 or 4.0.10, or Intel(R) Server Platform Services before ...

CWE-1192018

CVE-2006-7221

HIGH

CVSS:7.5(High)

Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecified vectors involving the (1) name and (2) d_name entry attributes.

CWE-1192006