Swift Rhino

**Name of the Vulnerable Software and Affected Versions** OpenJPEG versions prior to r3002 Google Chrome versions prior to 45.0.2454.85 **Description** The issue is related to a double free vulnerability in the `opj j2k copy default tcp and create tcd` function in `j2k.c` in OpenJPEG. This vulnerability allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure. The vulnerability is exploited by triggering a memory-allocation failure, which can lead to heap memory corruption. **Recommendations** For OpenJPEG versions prior to r3002, update to version r3002 or later to resolve the issue. For Google Chrome versions prior to 45.0.2454.85, update to version 45.0.2454.85 or later to resolve the issue. As a temporary workaround, consider disabling the `opj j2k copy default tcp and create tcd` function until a patch is available.