CVE-2016-10507

OpenJPEG contains an integer overflow in the bmp24toimage function (convertbmp.c) that affects OpenJPEG up to version 2.2.0. Exploitation of a crafted BMP file can cause a heap-based buffer over-read and a crash, i.e., a denial of service. The available connected documents indicate that fixes exi...