Intel · Opencv · CVE-2017-1000450
Name of the Vulnerable Software and Affected Versions:
OpenCV versions 3.3 and earlier
Description:
The issue is related to an integer overflow in the utils.cpp component of the OpenCV library, specifically in the `FillUniColor` and `FillUniGray` functions. These functions do not check the input length, which can lead to integer overflow. If the image is from a remote source, this could result in remote code execution or denial of service.
Recommendations:
For OpenCV versions 3.3 and earlier, consider updating to a newer version that includes a fix for this issue. As a temporary workaround, restrict the use of the `FillUniColor` and `FillUniGray` functions in opencv/modules/imgcodecs/src/utils.cpp to minimize the risk of exploitation. Avoid processing images from remote sources until the issue is resolved.