In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade opencv | Feb 19, 2019 | Aug 15, 2017 |
| Gentoo Linux | — | Upgrade media-libs/opencv. | Dec 18, 2017 | Aug 15, 2017 |
| Suse | — | Upgrade python-opencv-qt5Upgrade libopencv-qt56_3Upgrade opencv-debugsourceUpgrade python3-opencv-qt5-debuginfoUpgrade opencv-qt5-docUpgrade opencv-develUpgrade python3-opencv-debuginfoUpgrade opencv-qt5Upgrade opencv-docUpgrade opencv-qt5-develUpgrade python-opencvUpgrade opencv-debuginfoUpgrade libopencv3_1-debuginfoUpgrade opencv-qt5-debugsourceUpgrade opencvUpgrade python-opencv-qt5-debuginfoUpgrade libopencv3_1Upgrade opencv-qt5-debuginfoUpgrade libopencv-qt56_3-debuginfoUpgrade python-opencv-debuginfoUpgrade python3-opencv-qt5Upgrade python3-opencv | May 24, 2018 | Aug 15, 2017 |
| Ubuntu | — | Upgrade opencv | Nov 19, 2024 | Aug 15, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub