Integer Overflow

OpenCV is vulnerable to integer overflows. The PxMDecoder::readData has a flaw which allows attackers to cause an integer overflow when calculating srcpitch. Using this flaw, attackers can launch remote code execution RCE attacks and denial of service DoS attacks...

CVE-2017-12863

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function PxMDecoder::readData has an integer overflow when calculate srcpitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier...