CVEvulnerability
CVE-2017-12862
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-08-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Affected configurations
• opencv opencv (<= 3.3.0)
• debian debian linux 8.0
• debian debian linux 9.0
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://github.com/opencv/opencv/issues/9370 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201712-02 Third Party Advisory
- https://github.com/opencv/opencv/issues/9370 Issue Tracking, Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/201712-02 Third Party Advisory