Name: CVE-2018-5268: Out-of-bounds Write
Creator: Rapid7
Published: 2018-01-08T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2018-5268, CWE-787, CVSS 5.5, EPSS 0.00336

In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade opencv	Feb 19, 2019	Jan 8, 2018
Redhat_linux	—	No solution exists	Jul 9, 2025	Jan 8, 2018
Suse	—	Upgrade opencv-qt5-debuginfoUpgrade libopencv-qt56_3-debuginfoUpgrade libopencv3_1-debuginfoUpgrade opencv-docUpgrade opencv-debugsourceUpgrade python3-opencv-qt5Upgrade python3-opencvUpgrade python-opencv-qt5Upgrade python-opencv-qt5-debuginfoUpgrade opencv-develUpgrade python-opencv-debuginfoUpgrade python3-opencv-qt5-debuginfoUpgrade python3-opencv-debuginfoUpgrade opencvUpgrade opencv-debuginfoUpgrade opencv-qt5Upgrade libopencv3_1Upgrade opencv-qt5-debugsourceUpgrade opencv-qt5-docUpgrade libopencv-qt56_3Upgrade python-opencvUpgrade opencv-qt5-devel	May 29, 2018	Jan 8, 2018
Ubuntu	—	Upgrade opencv	Nov 19, 2024	Jan 8, 2018

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence