CVE-2017-14136

Published: 04 September 2017

OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.

From the Ubuntu security team

It was discovered that OpenCV incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service, execute arbitrary code or other unspecified impact.

Priority

Medium

CVSS 3 base score: 6.5

Status

Package Release Status
opencv
Launchpad, Ubuntu, Debian
Upstream Needs triage

Ubuntu 18.04 LTS (Bionic Beaver)
Released (3.2.0+dfsg-4ubuntu0.1)
Ubuntu 16.04 LTS (Xenial Xerus)
Released (2.4.9.1+dfsg-1.5ubuntu1.1)
Ubuntu 14.04 ESM (Trusty Tahr)
Released (2.4.8+dfsg1-2ubuntu1.1)