Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Alalek

#39116de 53,639
7.1CVSS total
Vulnerabilidades · 1
PT-2017-4223
7.1
2017-12-19
Opencv · Opencv · CVE-2017-17760
**Name of the Vulnerable Software and Affected Versions** OpenCV version 3.3.1 **Description** The issue is related to a Buffer Overflow in the `cv::PxMDecoder::readData` function in `grfmt pxm.cpp`. This occurs because an incorrect size value is used, allowing a remote attacker to cause a denial of service. The vulnerability is associated with the Open Source Computer Vision Library (OpenCV), which is used for computer vision, image processing, and general-purpose numerical algorithms. **Recommendations** For OpenCV version 3.3.1, consider disabling the `cv::PxMDecoder::readData` function as a temporary workaround until a patch is available. Restrict access to the `grfmt pxm.cpp` component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.