CVE-2016-10507: Integer Overflow
Published Aug 30, 2017
·Updated
Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.
Affected Software
1 affected component
uclouvain openjpeg<=2.1.2
Remediation
Patch Available
Event History
Aug 30, 2017
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10507?
CVE-2016-10507 is classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2016-10507?
To fix CVE-2016-10507, update OpenJPEG to version 2.2.0 or later.
3
What types of attacks can exploit CVE-2016-10507?
CVE-2016-10507 can be exploited through crafted BMP files that trigger an integer overflow leading to application crashes.
4
Which versions of OpenJPEG are affected by CVE-2016-10507?
OpenJPEG versions prior to 2.2.0, including version 2.1.2, are affected by CVE-2016-10507.
5
What are the consequences of exploiting CVE-2016-10507?
Exploiting CVE-2016-10507 can result in a heap-based buffer over-read, ultimately leading to denial of service.