CVE-2017-12603

OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp…

published August 7, 2017

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01986 · 80.4th percentile
Published
2017-08-07T01:00Z
EPSS history
Timeline
  • 07 AUG 01:00Z
    OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp…
    cvelistv5