GHSA-83rh-hx5x-q9p5

ghsaUSosv

Out-of-bounds Read in OpenCV

view advisory published 2021-10-12Licence: CC-BY-4.0

In OpenCV 3.3.1 (corresponding with OpenCV-Python 3.3.1.11), a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2017-18009US	high7.5	2.47% (84th)	—	2018-01-01
In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

references

External citations — patches, advisories, analysis.

http://www.securityfocus.com/bid/106945WEB
https://github.com/opencv/opencv-pythonPACKAGE
https://github.com/opencv/opencv/issues/10479WEB
https://github.com/opencv/opencv/pull/10480/commits/4ca89db22dea962690f31c1781bce5937ee91837WEB
https://nvd.nist.gov/vuln/detail/CVE-2017-18009ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan