PT-2017-12597

Name of the Vulnerable Software and Affected Versions OpenCV versions through 3.3 OpenCV-Python version 3.3.0.9 Description The issue is a denial of service CPU consumption problem. It can be demonstrated by the 11-opencv-dos-cpu-exhaust test case. Recommendations For OpenCV versions through 3.3,...

OpenCV Buffer Overflow Vulnerability (CNVD-2017-24177)

OpenCV is an open source, cross-platform, lightweight computer vision library. A buffer overflow vulnerability exists in the 'cv::BmpDecoder::readData' function in the modules/imgcodecs/src/grfmtbmp.cpp file in OpenCV 3.3 and earlier. An attacker could use this vulnerability to cause a denial of...

CVE-2017-12598: Out-of-bounds Read

OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case...

PT-2017-4216

Name of the Vulnerable Software and Affected Versions OpenCV versions through 3.3 Description The issue is related to an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file using cv::imread. This can allow a remote...

PT-2017-4339

Name of the Vulnerable Software and Affected Versions: OpenCV versions through 3.3 Description: The issue is related to an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file using cv::imread. This can lead to a buffer overflow,...

PT-2017-4340

Name of the Vulnerable Software and Affected Versions: OpenCV Open Source Computer Vision Library versions 3.3 and earlier Description: The issue is related to an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file using cv::imread. This can allow a...

PT-2017-4337

Name of the Vulnerable Software and Affected Versions: OpenCV versions 3.3 and earlier Description: The issue is related to an out-of-bounds write error in the FillColorRow1 function of the utils.cpp component in the OpenCV library. This error occurs when reading an image file using cv::imread...

PT-2017-4341

Name of the Vulnerable Software and Affected Versions: OpenCV versions through 3.3 Description: The issue is related to an out-of-bounds write error in the FillColorRow4 function in utils.cpp when reading an image file using cv::imread. This can potentially allow a remote attacker to access...

PT-2017-4338

Name of the Vulnerable Software and Affected Versions: OpenCV versions through 3.3 Description: The issue is related to an out-of-bounds read error in the icvCvt BGRA2BGR 8u C4C3R function when reading an image file using cv::imread. This error can allow a remote attacker to access confidential...

PT-2017-4219

Name of the Vulnerable Software and Affected Versions OpenCV versions through 3.3 Description The issue is related to an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread. This allows a remote attacker to access confidential data,...

PT-2017-4217

Name of the Vulnerable Software and Affected Versions OpenCV versions through 3.3 Description The issue is related to a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt bmp.cpp when reading an image file using cv::imread. This can be exploited by a remote...

Arbitrary Code Execution Via Double Free Buffer Overflow

openCV is susceptible to arbitrary code execution through a double free buffer overflow. The vulnerability exists because it does not prevent freeing the same memory address twice when processing an infected image with openCV...

Denial Of Service (DoS) Via Image Feature Extraction

openCV is vulnerable to denial of service DoS attacks. The attacks are possible when a seed image is processed to extract features with openCV. When freeing a matrix allocated for image processing, it leads to segmentation fault through vectors involving corrupt chunks...

DEBIAN-CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...

CVE-2016-1517

OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks...

CVE-2016-1516

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...