CVE-2017-12862
HighSummary
In module imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is smaller than expected, which may lead to buffer overflow during copying. If the image is remote, it may lead to remote code execution or denial of service.
Risk Assessment
This vulnerability may allow attackers to execute code remotely or cause service disruption, posing a serious security threat to the system.
Recommendation
It is recommended to upgrade to a newer version of OpenCV to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in OpenCV 3.3 and earlier
See all- CVE-2017-12864High
In the OpenCV library, the ReadNumber function did not check the input length, leading to integer overflow. If the image is remote, this may lead to remote code execution or denial of service.
- CVE-2017-12863High
In the OpenCV library, the PxMDecoder::readData function has an integer overflow when calculating src_pitch. This may lead to remote code execution or denial of service if the image is from a remote source.
Original NVD description (English source)
In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.