CVE-2016-10504
Fixed in a distro release EPSS 8%
Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp file.
Products: uclouvain openjpeg
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openjpeg2 | 2.2.0-1 |
| Debian 13 | openjpeg2 | 2.2.0-1 |
| Debian 14 | openjpeg2 | 2.2.0-1 |
| Ubuntu 16.04 LTS | openjpeg2 | 2.1.2-1.1+deb9u2build0.1 |