OpenCV 3.3 and earlier vulnerabilities

In the OpenCV library, the ReadNumber function did not check the input length, leading to integer overflow. If the image is remote, this may lead to remote code execution or denial of service.

In the OpenCV library, the PxMDecoder::readData function has an integer overflow when calculating src_pitch. This may lead to remote code execution or denial of service if the image is from a remote source.

In module imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is smaller than expected, which may lead to buffer overflow during copying. If the image is remote, it may lead to remote code execution or denial of service.