CVE catalog

CVE-2015-1273

UBUNTU-

Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service or possibly have unspecified other impact via invalid JPEG2000 data in a PDF document.

Severity: Unknown
Published: Jul 21, 2015, 12:00:00 AM UTC
Updated: Apr 22, 2026, 10:02:48 AM UTC
Source: [NVD] · [CVE record]
EPSS: 1.54% · Oct 27, 2026

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Ubuntupro	openjpeg	`1:1.5.2-3.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntupro	openjpeg	`1:1.5.2-3.1ubuntu0.1~esm2`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`29.0.1547.65-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`31.0.1650.63-0ubuntu1~20131204.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`32.0.1700.107-0ubuntu1~20140204.977.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`33.0.1750.152-0ubuntu1~pkg995.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`34.0.1847.116-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`36.0.1985.125-0ubuntu1.14.04.0~pkg1029`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`37.0.2062.120-0ubuntu0.14.04.1~pkg1049`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`37.0.2062.94-0ubuntu0.14.04.1~pkg1042`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`38.0.2125.111-0ubuntu0.14.04.1.1061`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`39.0.2171.65-0ubuntu0.14.04.1.1064`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC

Showing 12 observations. All 20 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
Ubuntu14.04	chromium-browser	`29.0.1547.65-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`31.0.1650.63-0ubuntu1~20131204.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`32.0.1700.107-0ubuntu1~20140204.977.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`33.0.1750.152-0ubuntu1~pkg995.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`34.0.1847.116-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`36.0.1985.125-0ubuntu1.14.04.0~pkg1029`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`37.0.2062.120-0ubuntu0.14.04.1~pkg1049`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`37.0.2062.94-0ubuntu0.14.04.1~pkg1042`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`38.0.2125.111-0ubuntu0.14.04.1.1061`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`39.0.2171.65-0ubuntu0.14.04.1.1064`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`40.0.2214.111-0ubuntu0.14.04.1.1069`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`40.0.2214.94-0ubuntu0.14.04.1.1068`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`41.0.2272.76-0ubuntu0.14.04.1.1076`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`43.0.2357.130-0ubuntu0.14.04.1.1092`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`43.0.2357.81-0ubuntu0.14.04.1.1089`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	chromium-browser	`44.0.2403.89-0ubuntu0.14.04.1.1095`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	openjpeg	`1.3+dfsg-4.6ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntu14.04	openjpeg	`1.3+dfsg-4.7ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntupro	openjpeg	`1:1.5.2-3.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC
Ubuntupro	openjpeg	`1:1.5.2-3.1ubuntu0.1~esm2`	UnknownSource applicability is not established	[UBUNTU-CVE-2015-1273]Apr 22, 2026, 10:02:48 AM UTC

Original provider fields

{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "chromium-browser",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "44.0.2403.89-0ubuntu0.14.04.1.1095"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "29.0.1547.65-0ubuntu2",
        "31.0.1650.63-0ubuntu1~20131204.1",
        "32.0.1700.107-0ubuntu1~20140204.977.1",
        "33.0.1750.152-0ubuntu1~pkg995.1",
        "34.0.1847.116-0ubuntu2",
        "36.0.1985.125-0ubuntu1.14.04.0~pkg1029",
        "37.0.2062.94-0ubuntu0.14.04.1~pkg1042",
        "37.0.2062.120-0ubuntu0.14.04.1~pkg1049",
        "38.0.2125.111-0ubuntu0.14.04.1.1061",
        "39.0.2171.65-0ubuntu0.14.04.1.1064",
        "40.0.2214.94-0ubuntu0.14.04.1.1068",
        "40.0.2214.111-0ubuntu0.14.04.1.1069",
        "41.0.2272.76-0ubuntu0.14.04.1.1076",
        "43.0.2357.81-0ubuntu0.14.04.1.1089",
        "43.0.2357.130-0ubuntu0.14.04.1.1092"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1273",
      "fixed_version": "44.0.2403.89-0ubuntu0.14.04.1.1095",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1273",
      "provider_updated_at": "2026-04-22T10:02:48.912942Z",
      "applicability_unknown": true
    },
    {
      "name": "openjpeg",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "14.04",
      "versions": [
        "1.3+dfsg-4.6ubuntu2",
        "1.3+dfsg-4.7ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1273",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1273",
      "provider_updated_at": "2026-04-22T10:02:48.912942Z",
      "applicability_unknown": true
    },
    {
      "name": "openjpeg",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "1:1.5.2-3.1",
        "1:1.5.2-3.1ubuntu0.1~esm2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2015-1273",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2015-1273",
      "provider_updated_at": "2026-04-22T10:02:48.912942Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

Observed: Oct 23, 2026, 5:14:17 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]