Unrated severityNVD Advisory· Published Sep 3, 2015· Updated Jun 17, 2026

CVE-2015-6581

Description

Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=44.0.2403
- (no CPE)range: <45.0.2454.85
OpenJPEG/openjpeg2llm-fuzzy
Range: <r3002

Patches

Vulnerability mechanics

References

googlechromereleases.blogspot.com/2015/09/stable-channel-update.htmlnvd
lists.fedoraproject.org/pipermail/package-announce/2015-October/168736.htmlnvd
lists.fedoraproject.org/pipermail/package-announce/2015-October/169258.htmlnvd
www.debian.org/security/2016/dsa-3665nvd
www.securitytracker.com/id/1033472nvd
code.google.com/p/chromium/issues/detailnvd
code.google.com/p/chromium/issues/detailnvd
code.google.com/p/openjpeg/issues/detailnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000