CVE-2017-12863
HighSummary
In the OpenCV library, the PxMDecoder::readData function has an integer overflow when calculating src_pitch. This may lead to remote code execution or denial of service if the image is from a remote source.
Risk Assessment
This vulnerability could allow attackers to execute code remotely or cause service outages, posing a serious security threat to systems using OpenCV.
Recommendation
It is recommended to upgrade to a newer version of OpenCV to mitigate this vulnerability and to monitor applications using this library for unauthorized access.
Other vulnerabilities in OpenCV 3.3 and earlier
See all- CVE-2017-12864High
In the OpenCV library, the ReadNumber function did not check the input length, leading to integer overflow. If the image is remote, this may lead to remote code execution or denial of service.
- CVE-2017-12862High
In module imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is smaller than expected, which may lead to buffer overflow during copying. If the image is remote, it may lead to remote code execution or denial of service.
Original NVD description (English source)
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.