CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2017-12601
https://notcve.org/view.php?id=CVE-2017-12601
OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case. La versión 3.3 de OpenCV (Open Source Computer Vision Library) tiene un desbordamiento de búfer en la función cv::BmpDecoder::readData en modules/imgcodecs/src/grfmt_bmp.cpp cuando lee un archivo de imagen utilizando cv::imread. Esto se ha demostrado con la prueba 4-buf-overflow-readData-memcpy. • https://github.com/opencv/opencv/issues/9309 https://github.com/xiaoqx/pocs/blob/master/opencv.md https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html https://security.gentoo.org/glsa/201712-02 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2017-12602
https://notcve.org/view.php?id=CVE-2017-12602
OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case. La versión 3.3 de OpenCV (Open Source Computer Vision Library) tiene un problema de denegación de servicio (consumo de memoria), como se ha demostrado con la prueba 10-opencv-dos-memory-exhaust. • https://github.com/opencv/opencv/issues/9311 https://github.com/xiaoqx/pocs/blob/master/opencv.md https://security.gentoo.org/glsa/201712-02 •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2017-12603
https://notcve.org/view.php?id=CVE-2017-12603
OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case. La versión 3.3 de OpenCV (Open Source Computer Vision Library) tiene una escritura no válida en la función cv::RLByteStream::getBytes en modules/imgcodecs/src/bitstrm.cpp. cuando lee un archivo de imagen utilizando cv::imread. Esto se ha demostrado con la prueba 2-opencv-heapoverflow-fseek. • https://github.com/opencv/opencv/issues/9309 https://github.com/xiaoqx/pocs/blob/master/opencv.md https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html https://security.gentoo.org/glsa/201712-02 • CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2017-12604
https://notcve.org/view.php?id=CVE-2017-12604
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread. La versión 3.3 de OpenCV (Open Source Computer Vision Library) provoca un error de escritura fuera de límites en la función FillUniColor en utils.cpp cuando lee una imagen utilizando cv::imread. • https://github.com/opencv/opencv/issues/9309 https://github.com/xiaoqx/pocs/blob/master/opencv.md https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html https://security.gentoo.org/glsa/201712-02 • CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2017-12605
https://notcve.org/view.php?id=CVE-2017-12605
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread. La versión 3.3 de OpenCV (Open Source Computer Vision Library) provoca un error de escritura fuera de límites en la función FillColorRow8 en utils.cpp cuando lee un archivo de imagen utilizando cv::imread. • https://github.com/opencv/opencv/issues/9309 https://github.com/xiaoqx/pocs/blob/master/opencv.md https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html https://security.gentoo.org/glsa/201712-02 • CWE-787: Out-of-bounds Write •