PT-2017-4217

Name of the Vulnerable Software and Affected Versions OpenCV versions through 3.3 Description The issue is related to a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt bmp.cpp when reading an image file using cv::imread. This can be exploited by a remote...

Arbitrary Code Execution Via Double Free Buffer Overflow

openCV is susceptible to arbitrary code execution through a double free buffer overflow. The vulnerability exists because it does not prevent freeing the same memory address twice when processing an infected image with openCV...

Denial Of Service (DoS) Via Image Feature Extraction

openCV is vulnerable to denial of service DoS attacks. The attacks are possible when a seed image is processed to extract features with openCV. When freeing a matrix allocated for image processing, it leads to segmentation fault through vectors involving corrupt chunks...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

DEBIAN-CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

UBUNTU-CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

Design/Logic Flaw

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

Double free

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

UBUNTU-CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 is affected by a double-free vulnerability (CVE-2016-1516) that could allow arbitrary code execution. The connected Nessus entries and Debian/RHEL advisories enumerate OpenCV 3.0.0 as vulnerable and list multiple related CVEs for OpenCV in older releases; Debian’s DLA-2799 and OSV no...