GitStock

opencv/opencv-python · Security

Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV

GHSA ID
GHSA-w96g-3p64-63wr
CVE ID
CVE-2017-12601
Severity
high
Published
Updated
CVSS
8.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v3
8.8 · CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

OpenCV (Open Source Computer Vision Library) through 3.3 (corresponding to OpenCV-Python 3.3.0.9) has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.

CWEs

  • CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
  • CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

References