Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Blendin

#27505of 53,632
9.3Total CVSS
Vulnerabilities · 1
PT-2017-4336
9.3
2017-09-27
Intel · Opencv · CVE-2017-1000450
Name of the Vulnerable Software and Affected Versions: OpenCV versions 3.3 and earlier Description: The issue is related to an integer overflow in the utils.cpp component of the OpenCV library, specifically in the `FillUniColor` and `FillUniGray` functions. These functions do not check the input length, which can lead to integer overflow. If the image is from a remote source, this could result in remote code execution or denial of service. Recommendations: For OpenCV versions 3.3 and earlier, consider updating to a newer version that includes a fix for this issue. As a temporary workaround, restrict the use of the `FillUniColor` and `FillUniGray` functions in opencv/modules/imgcodecs/src/utils.cpp to minimize the risk of exploitation. Avoid processing images from remote sources until the issue is resolved.