Every CVE Search/ Get API key

CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2...

6.5 MediumFix available

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.45%Up 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.5

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Record
CVE-2016-10507
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-190
Updated
2026-11-02
CVE List No score

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Record
CVE-2016-10507
Updated
2026-11-02
EUVDEUVD-2016-1689 No score

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Record
EUVD-2016-1689
Updated
2026-11-03
GitHub AdvisoriesGHSA-5vr5-4x8v-hcfp 6.5

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2...

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Record
GHSA-5vr5-4x8v-hcfp
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-190
Updated
2026-11-02
OSV 6.5

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Record
CVE-2016-10507
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-10507 6.5

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Record
DEBIAN-CVE-2016-10507
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2016-10507 6.5

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file.

Record
UBUNTU-CVE-2016-10507
CVSS 3.0
6.5 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVopenSUSE-SU-2017:2685-1 No score

Security update for openjpeg2

This update for openjpeg2 fixes several issues.

These security issues were fixed:

  • CVE-2016-10507: Integer overflow vulnerability in the bmp24toimage function allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file (bsc#1056421).
  • CVE-2017-14039: A heap-based buffer overflow was discovered in the opj_t2_encode_packet function. The vulnerability caused an out-of-bounds write, which may have lead to remote denial of service or possibly unspecified other impact (bsc#1056622).
  • CVE-2017-14164: A size-validation issue was discovered in opj_j2k_write_sot. The vulnerability caused an out-of-bounds write, which may have lead to remote DoS or possibly remote code execution (bsc#1057511).
  • CVE-2017-14040: An invalid write access was discovered in bin/jp2/convert.c, triggering a crash in the tgatoimage function. The vulnerability may have lead to remote denial of service or possibly unspecified other impact (bsc#1056621).
  • CVE-2017-14041: A stack-based buffer overflow was discovered in the pgxtoimage function. The vulnerability caused an out-of-bounds write, which may have lead to remote denial of service or possibly remote code execution (bsc#1056562).

This update was imported from the SUSE:SLE-12-SP2:Update update project.

Record
openSUSE-SU-2017:2685-1
Updated
2026-11-02
OSVopenSUSE-SU-2017:2686-1 No score

Security update for openjpeg2

This update for openjpeg2 fixes several issues.

These security issues were fixed:

  • CVE-2016-10507: Integer overflow vulnerability in the bmp24toimage function allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file (bsc#1056421).
  • CVE-2017-14039: A heap-based buffer overflow was discovered in the opj_t2_encode_packet function. The vulnerability caused an out-of-bounds write, which may have lead to remote denial of service or possibly unspecified other impact (bsc#1056622).
  • CVE-2017-14164: A size-validation issue was discovered in opj_j2k_write_sot. The vulnerability caused an out-of-bounds write, which may have lead to remote DoS or possibly remote code execution (bsc#1057511).
  • CVE-2017-14040: An invalid write access was discovered in bin/jp2/convert.c, triggering a crash in the tgatoimage function. The vulnerability may have lead to remote denial of service or possibly unspecified other impact (bsc#1056621).
  • CVE-2017-14041: A stack-based buffer overflow was discovered in the pgxtoimage function. The vulnerability caused an out-of-bounds write, which may have lead to remote denial of service or possibly remote code execution (bsc#1056562).

This update was imported from the SUSE:SLE-12-SP2:Update update project.

Record
openSUSE-SU-2017:2686-1
Updated
2026-11-02
OSVSUSE-SU-2017:2649-1 No score

Security update for openjpeg2

This update for openjpeg2 fixes several issues.

These security issues were fixed:

  • CVE-2016-10507: Integer overflow vulnerability in the bmp24toimage function allowed remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted bmp file (bsc#1056421).
  • CVE-2017-14039: A heap-based buffer overflow was discovered in the opj_t2_encode_packet function. The vulnerability caused an out-of-bounds write, which may have lead to remote denial of service or possibly unspecified other impact (bsc#1056622).
  • CVE-2017-14164: A size-validation issue was discovered in opj_j2k_write_sot. The vulnerability caused an out-of-bounds write, which may have lead to remote DoS or possibly remote code execution (bsc#1057511).
  • CVE-2017-14040: An invalid write access was discovered in bin/jp2/convert.c, triggering a crash in the tgatoimage function. The vulnerability may have lead to remote denial of service or possibly unspecified other impact (bsc#1056621).
  • CVE-2017-14041: A stack-based buffer overflow was discovered in the pgxtoimage function. The vulnerability caused an out-of-bounds write, which may have lead to remote denial of service or possibly remote code execution (bsc#1056562).
Record
SUSE-SU-2017:2649-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjpeg2
Debian:12
 before 2.1.2-1
2.1.2-1
openjpeg2
Debian:13
 before 2.1.2-1
2.1.2-1
openjpeg2
Debian:14
 before 2.1.2-1
2.1.2-1
openjpeg2
SUSE:Linux Enterprise Desktop 12 SP2
From an advisory covering 5 CVEs
 before 2.1.0-4.6.1
2.1.0-4.6.1
openjpeg2
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 5 CVEs
 before 2.1.0-4.6.1
2.1.0-4.6.1
openjpeg2
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
From an advisory covering 5 CVEs
 before 2.1.0-4.6.1
2.1.0-4.6.1
openjpeg2
SUSE:Linux Enterprise Server 12 SP2
From an advisory covering 5 CVEs
 before 2.1.0-4.6.1
2.1.0-4.6.1
openjpeg2
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 5 CVEs
 before 2.1.0-4.6.1
2.1.0-4.6.1
openjpeg2
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 5 CVEs
 before 2.1.0-4.6.1
2.1.0-4.6.1
openjpeg2
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 5 CVEs
 before 2.1.0-4.6.1
2.1.0-4.6.1
openjpeg2
Ubuntu:16.04:LTS
 before 2.1.2-1.1+deb9u2build0.1, plus listed versions
2.1.0-2.12.1.0-2.1ubuntu0.1
2.1.2-1.1+deb9u2build0.1
openjpeg2
SUSE:Package Hub 12
From an advisory covering 5 CVEs
 before 2.1.0-9.1
2.1.0-9.1
openjpeg2
SUSE:Package Hub 12 SP1
From an advisory covering 5 CVEs
 before 2.1.0-9.1
2.1.0-9.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-10507 is a medium vulnerability (CVSS 6.5) in Uclouvain Openjpeg, published August 30, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.45%, the 84th percentile. Fixed in openjpeg2 2.1.2-1.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open