Google Chrome browser PDFium contains exploitable vulnerability (known as CVE-2016-1681) that could have resulted in malicious code being run on innocent users systems. The vulnerability does not lie in Chromes own code, or that of PDFium, but in the OpenJPEG library that is used to handle the display of JPEG2000 files. Cisco’s Aleksander Nikolic who responsibly disclosed details of the flaw to Google was awarded a $3,000 bug bounty for his efforts.”]

