Vulnerabilities > Opencv > High

DATE CVE VULNERABILITY TITLE RISK
2018-01-02 CVE-2017-1000450 Integer Overflow or Wraparound vulnerability in multiple products
In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow.
network
low complexity
opencv debian CWE-190
8.8
2018-01-01 CVE-2017-18009 Out-of-bounds Read vulnerability in Opencv 3.3.1
In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.
network
low complexity
opencv CWE-125
7.5
2017-08-15 CVE-2017-12864 Integer Overflow or Wraparound vulnerability in multiple products
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow.
network
low complexity
opencv debian CWE-190
8.8
2017-08-15 CVE-2017-12863 Integer Overflow or Wraparound vulnerability in multiple products
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch.
network
low complexity
opencv debian CWE-190
8.8
2017-08-15 CVE-2017-12862 Out-of-bounds Write vulnerability in multiple products
In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later.
network
low complexity
opencv debian CWE-787
8.8
2017-08-07 CVE-2017-12606 Out-of-bounds Write vulnerability in multiple products
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread.
network
low complexity
opencv debian CWE-787
8.8
2017-08-07 CVE-2017-12605 Out-of-bounds Write vulnerability in multiple products
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread.
network
low complexity
opencv debian CWE-787
8.8
2017-08-07 CVE-2017-12604 Out-of-bounds Write vulnerability in multiple products
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread.
network
low complexity
opencv debian CWE-787
8.8
2017-08-07 CVE-2017-12603 Out-of-bounds Write vulnerability in multiple products
OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case.
network
low complexity
opencv debian CWE-787
8.8
2017-08-07 CVE-2017-12602 Unspecified vulnerability in Opencv
OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.
network
low complexity
opencv
7.5