CVE-2017-14136

OpenCV Open Source Computer Vision Library 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597...

CVE-2017-12598

CVE-2017-12598 affects OpenCV up to version 3.3.0, where an out-of-bounds read occurs in cv::RBaseStream::readBlock (modules/imgcodecs/src/bitstrm.cpp) when reading an image with cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case. The connected documents confirm the vulnerab...