cbcvebase.
CVE-2017-14136
published 2017-09-04

CVE-2017-14136: OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by…

medium6.5CVSS 3.0
AVNACLPRNUIRSUCNINAH
OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.

Affected

5 ranges
VendorProductVersion rangeFixed in
debiandebian_linux——
debianopencv——
opencvopencv——
opencvopencv>= 0 < 2.4.9.1+dfsg-1.5ubuntu1.12.4.9.1+dfsg-1.5ubuntu1.1
opencvopencv>= 0 < 3.2.0+dfsg-4ubuntu0.13.2.0+dfsg-4ubuntu0.1

CVSS provenance

nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
ghsa8.8HIGH
osv8.8HIGH