CVE-2017-1000450
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.3%
In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Affected products
n/a · n/aReferences
https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColorhttps://github.com/opencv/opencv/issues/9723https://lists.debian.org/debian-lts-announce/2018/01/msg00008.htmlhttps://lists.debian.org/debian-lts-announce/2018/07/msg00030.htmlhttps://lists.debian.org/debian-lts-announce/2021/10/msg00028.html