CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Database specific

{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:uclouvain:openjpeg:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "last_affected":  "2.1.2"
                }
            ],
            "source":  "CPE_RANGE",
            "vendor_product":  "uclouvain:openjpeg"
        },
        {
            "extracted_events":  [
                {
                    "fixed":  "2.2.0"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

References

Affected packages

Git / github.com/uclouvain/openjpeg

Affected ranges

Type

GIT

Repo

https://github.com/uclouvain/openjpeg

Events

Introduced

Fixed

da940424816e11d624362ce080bc026adffa26e8

Database specific

Show details

{
    "source":  "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-10507.json"