CVE-2017-12864
HighSummary
In the OpenCV library, the ReadNumber function did not check the input length, leading to integer overflow. If the image is remote, this may lead to remote code execution or denial of service.
Risk Assessment
The organization may be exposed to remote code execution or denial of service attacks, which can lead to serious security implications.
Recommendation
It is recommended to update OpenCV to a version newer than 3.3 to mitigate the risk associated with this vulnerability.
Other vulnerabilities in OpenCV 3.3 and earlier
See all- CVE-2017-12863High
In the OpenCV library, the PxMDecoder::readData function has an integer overflow when calculating src_pitch. This may lead to remote code execution or denial of service if the image is from a remote source.
- CVE-2017-12862High
In module imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is smaller than expected, which may lead to buffer overflow during copying. If the image is remote, it may lead to remote code execution or denial of service.
Original NVD description (English source)
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.