882 matches found
CVE-2017-12863: Integer Overflow or Wraparound
In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function PxMDecoder::readData has an integer overflow when calculate srcpitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...
CVE-2017-12862: Out-of-bounds Write
In modules/imgcodecs/src/grfmtpxm.cpp, the length of buffer AutoBuffer src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...
CVE-2017-12864: Integer Overflow or Wraparound
In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...
PT-2017-4344
Name of the Vulnerable Software and Affected Versions: OpenCV versions 3.3 and earlier Description: The issue is related to an integer overflow in the ReadNumber function in opencv/modules/imgcodecs/src/grfmt pxm.cpp. This can lead to remote code execution or denial of service if the image is fro...
Hijacked Environment Variables
Overview The node-opencv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real...
Out-of-bounds
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread...
Out-of-bounds
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread...
Buffer overflow
OpenCV Open Source Computer Vision Library through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case...
Buffer overflow
OpenCV Open Source Computer Vision Library through 3.3 has a denial of service memory consumption issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case...
CVE-2017-12605
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread...
CVE-2017-12599
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the function icvCvtBGRA2BGR8uC4C3R when reading an image file by using cv::imread...
CVE-2017-12606
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread...
CVE-2017-12604
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread...
CVE-2017-12602
OpenCV Open Source Computer Vision Library through 3.3 has a denial of service memory consumption issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case...
UBUNTU-CVE-2017-12599
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the function icvCvtBGRA2BGR8uC4C3R when reading an image file by using cv::imread...
CVE-2017-12597
OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread...
CVE-2017-12603
OpenCV Open Source Computer Vision Library through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case...
DEBIAN-CVE-2017-12602
OpenCV Open Source Computer Vision Library through 3.3 has a denial of service memory consumption issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case...