Cisco Talos Team disclosed a zero-day flaw affecting the JPEG 2000 image file format parser implemented in the OpenJPEG library. The vulnerability could allow an out-of-bound heap write to occur, resulting in heap corruption and lead to arbitrary code execution. The flaw has a serious impact because the. JPEG 2000 file format is commonly used for embedding images inside PDF documents. In order to exploit the vulnerability, an attacker has to trick victims into opening a file containing a. specifically crafted JPEG 2000. image that triggers the flaw.”]
Source: http://securityaffairs.co/wordpress/51860/hacking/jpeg-2000-zero-day.html