PT-2017-4340 · Open Source Computer Vision Library+1 · Opencv+1

CVE-2017-12605

·

Publicado

2017-08-04

·

Atualizado

2026-07-09

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: OpenCV (Open Source Computer Vision Library) versions 3.3 and earlier
Description: The issue is related to an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file using cv::imread. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations: For OpenCV versions 3.3 and earlier, consider disabling the FillColorRow8 function in utils.cpp as a temporary workaround until a patch is available. Restrict access to image file reading using cv::imread to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-07604
CVE-2017-12605
DLA-1117-1
DLA-1438-1
DLA-2799-1
GHSA-RQXG-XVCQ-3V2F
OPENSUSE-SU-2018_1385-1
PYSEC-2026-2829
PYSEC-2026-714

Produtos afetados

Opencv
Suse