Lucene search
GoogleOSV:GHSA-6V6P-P97V-G2P7HistoryOct 12, 2021 - 10:01 p.m.
Out-of-bounds Write in OpenCV
2021-10-1222:01:44
Google
osv.dev
17
opencv
vulnerability
image file reading
3.3
invalid write
EPSS
0.003
Percentile
70.4%
OpenCV (Open Source Computer Vision Library) through 3.3 (corresponding to OpenCV-Python and OpenCV-Contrib-Python 3.3.0.9) has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case.
References
github.com/opencv/opencv-python
github.com/opencv/opencv/issues/9309
github.com/opencv/opencv/pull/9376
github.com/xiaoqx/pocs/blob/master/opencv.md
lists.debian.org/debian-lts-announce/2018/07/msg00030.html
lists.debian.org/debian-lts-announce/2021/10/msg00028.html
nvd.nist.gov/vuln/detail/CVE-2017-12603
security.gentoo.org/glsa/201712-02
Related
osv
osv
CVE-2017-12603
2017-08-07 01:29:00
opencv - security update
2017-09-29 00:00:00
opencv - security update
2018-07-22 00:00:00
ubuntucve
ubuntucve
CVE-2017-12603
2017-08-07 00:00:00
cvelist
cvelist
CVE-2017-12603
2017-08-07 01:00:00
github
github
Out-of-bounds Write in OpenCV
2021-10-12 22:01:44
debiancve
debiancve
CVE-2017-12603
2017-08-07 01:29:00
redhatcve
redhatcve
CVE-2017-12603
2017-08-22 08:49:19
nvd
nvd
CVE-2017-12603
2017-08-07 01:29:00
cve
cve
CVE-2017-12603
2017-08-07 01:29:00
prion
prion
Buffer overflow
2017-08-07 01:29:00
openvas
openvas
Debian: Security Advisory (DLA-1117-1)
2018-02-06 00:00:00
openSUSE: Security Advisory for opencv (openSUSE-SU-2018:1385-1)
2018-05-24 00:00:00
Debian: Security Advisory (DLA-2799-1)
2021-10-31 00:00:00
debian
debian
[SECURITY] [DLA 1117-1] opencv security update
2017-09-29 20:53:51
[SECURITY] [DLA 1438-1] opencv security update
2018-07-22 10:43:13
[SECURITY] [DLA 2799-1] opencv security update
2021-10-30 14:30:18
gentoo
gentoo
OpenCV: Multiple vulnerabilities
2017-12-14 00:00:00
nessus
nessus
openSUSE Security Update : opencv (openSUSE-2018-492)
2018-05-24 00:00:00
Debian DLA-1117-1 : opencv security update
2017-10-02 00:00:00
RHEL 6 : opencv (Unpatched Vulnerability)
2024-06-03 00:00:00
suse
suse
Security update for opencv (important)
2018-05-23 15:10:05