Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-10504

Fixed in a distro release EPSS 8%

Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp file.

Published 2017-08-30 · CVE record · OSV

Products: uclouvain openjpeg

Distro releases

ReleasePackageFixed in
Debian 12openjpeg22.2.0-1
Debian 13openjpeg22.2.0-1
Debian 14openjpeg22.2.0-1
Ubuntu 16.04 LTSopenjpeg22.1.2-1.1+deb9u2build0.1