GitHub Advisoryadvisory · PyPI

GHSA-jcxv-2j3h-mg59 Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV

MEDIUM Published 2021-10-12 Modified 2021-11-18 Official page ↗
Aliases
CVE-2017-17760
Ecosystem
PyPI
Packages
opencv-python, opencv-contrib-python
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-119
Reviewed
2021-10-07

Affected packages

• PyPI opencv-python: < 3.4.0.12 → fixed in 3.4.0.12 • PyPI opencv-contrib-python: < 3.4.0.12 → fixed in 3.4.0.12

Description

OpenCV 3.3.1 (corresponding with opencv-python and opencv-contrib-python 3.3.1.11) has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.

Related

Alias · CVE (1)

  • CVE-2017-17760 OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used. vulnerability

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References