The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade opencv | Feb 19, 2019 | Jan 2, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 2, 2018 |
| Suse | — | Upgrade opencv-qt5-debugsourceUpgrade opencv-debuginfoUpgrade opencv-qt5-develUpgrade libopencv3_1-debuginfoUpgrade opencv-qt5-docUpgrade opencv-qt5-debuginfoUpgrade libopencv-qt56_3Upgrade python3-opencv-debuginfoUpgrade python3-opencvUpgrade python-opencv-qt5Upgrade python3-opencv-qt5Upgrade opencv-debugsourceUpgrade python-opencvUpgrade opencvUpgrade opencv-docUpgrade libopencv-qt56_3-debuginfoUpgrade opencv-develUpgrade python-opencv-debuginfoUpgrade python3-opencv-qt5-debuginfoUpgrade libopencv3_1Upgrade opencv-qt5Upgrade python-opencv-qt5-debuginfo | May 29, 2018 | Jan 2, 2018 |
| Ubuntu | — | Upgrade opencv | Nov 19, 2024 | Jan 2, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub