CVE-2016-10507

—

CVSS 3.0

6.5 medium

EPSS

2%p81

Published

Aug 30, 2017 (Aug 30, 2017)

Modified

Jun 17, 2026

Description

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Vendors: uclouvain
Products: openjpeg
Weakness: CWE-190
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.