GitHub Advisoryadvisory · PyPI

GHSA-83rh-hx5x-q9p5 Out-of-bounds Read in OpenCV

HIGH Published 2021-10-12 Modified 2021-10-07 Official page ↗
Aliases
CVE-2017-18009
Ecosystem
PyPI
Packages
opencv-python, opencv-contrib-python
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-125
Reviewed
2021-10-07

Affected packages

• PyPI opencv-python: < 3.4.1.15 → fixed in 3.4.1.15 • PyPI opencv-contrib-python: < 3.4.1.15 → fixed in 3.4.1.15

Description

In OpenCV 3.3.1 (corresponding with OpenCV-Python 3.3.1.11), a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

Related

Alias · CVE (1)

  • CVE-2017-18009 In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp. vulnerability

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References