In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade opencv | Feb 19, 2019 | Aug 15, 2017 |
| Gentoo Linux | — | Upgrade media-libs/opencv. | Dec 18, 2017 | Aug 15, 2017 |
| Suse | — | Upgrade python-opencvUpgrade python-opencv-qt5Upgrade opencv-qt5-debuginfoUpgrade opencv-qt5-develUpgrade libopencv3_1-debuginfoUpgrade python3-opencv-debuginfoUpgrade python3-opencv-qt5-debuginfoUpgrade python3-opencvUpgrade libopencv-qt56_3Upgrade opencv-debugsourceUpgrade opencv-qt5-debugsourceUpgrade opencv-debuginfoUpgrade opencv-qt5-docUpgrade python3-opencv-qt5Upgrade opencv-develUpgrade opencv-docUpgrade libopencv-qt56_3-debuginfoUpgrade libopencv3_1Upgrade opencvUpgrade python-opencv-debuginfoUpgrade python-opencv-qt5-debuginfoUpgrade opencv-qt5 | May 24, 2018 | Aug 15, 2017 |
| Ubuntu | — | Upgrade opencv | Nov 19, 2024 | Aug 15, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub