UBUNTU-CVE-2016-10504

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

CVE-2016-10504

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

CVE-2016-10504

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

CVE-2016-10504

OpenJPEG before 2.2.0 is affected by a heap-based buffer overflow in opj_mqc_byteout (mqc.c), enabling DoS via a crafted BMP file. Affected component: OpenJPEG JPEG 2000 library. Impact: application crash; denial of service. Remediation: upgrade to version 2.2.0 or later (OpenJPEG 2.2.x+/beyond)....

CVE-2016-10504

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

CVE-2016-10504

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

CVE-2016-10507

Integer overflow vulnerability in the bmp24toimage function in convertbmp.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted bmp file...

OpenJPEG integer overflow vulnerability (CNVD-2017-27281)

OpenJPEG is a C-based open source JPEG 2000 codec . An integer overflow vulnerability exists in the opjcompress component of OpenJPEG, which could be exploited by a remote attacker to conduct a denial of service attack or remotely execute arbitrary code by constructing a specially crafted BMP ima...

CVE-2016-10504: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow vulnerability in the opjmqcbyteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service application crash via a crafted bmp file...

WS-2017-3756

In php-src, php-4.3.0RC1 to 7.2.0beta3, the “imagecreatefromstring” PHP function is vulnerable to a denial of service, and potentially to an information disclosure vulnerability, due to mishandling of the bmp images data start offset...

DEBIAN-CVE-2017-12982

The bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service memory allocation failure in the opjimagecreate function in lib/openjp2/image.c, related to the opjalignedallocn...

ALPINE-CVE-2017-12982

The bmpreadinfoheader function in bin/jp2/convertbmp.c in OpenJPEG 2.2.0 does not reject headers with a zero biBitCount, which allows remote attackers to cause a denial of service memory allocation failure in the opjimagecreate function in lib/openjp2/image.c, related to the opjalignedallocn...

PT-2017-12821

Name of the Vulnerable Software and Affected Versions OpenJPEG version 2.2.0 Description The issue is related to the bmp read info header function, which does not properly handle headers with a zero biBitCount, leading to a denial of service due to memory allocation failure in the opj image creat...

The vulnerability of the bmp2tiff component in the LibTIFF library allows a hacker to gain access to data beyond the buffer boundaries allocated in dynamic memory.

The vulnerability of the bmp2tiff component in the LibTIFF library arises from insufficient checking of the input parameters biWidth and biHeight in the bitmap-information header of the BMP image. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data beyo...

UBUNTU-CVE-2017-12601

OpenCV Open Source Computer Vision Library through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case...

DEBIAN-CVE-2017-12601

OpenCV Open Source Computer Vision Library through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case...

PT-2017-2820

Name of the Vulnerable Software and Affected Versions ImageMagick version 7.0.6-6 Description The issue is related to errors in resource management in the ReadBMPImage function, which can be exploited by remote attackers to cause a denial of service through memory consumption. This can be achieve...

PT-2017-19432

Name of the Vulnerable Software and Affected Versions gdk-pixbuf2.0 versions prior to 2.36.7 Description The issue concerns integer overflows in the ico, bmp, and tiff decoders, along with other bugs. Recommendations For versions prior to 2.36.7, update to version 2.36.7 to resolve the issue...