PYSEC-2026-2810
Out-of-bounds Read in OpenCV
At a glance
- Published
- Updated
- CVE
- CVE-2017-18009
- Aliases
- GHSA-83rh-hx5x-q9p5, PYSEC-2026-702
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
In OpenCV 3.3.1 (corresponding with OpenCV-Python 3.3.1.11), a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.
Affected packages
| Package | Versions |
|---|---|
| PyPI · opencv-python | introduced 0, fixed 3.4.1.15 |
References
- https://nvd.nist.gov/vuln/detail/CVE-2017-18009 ADVISORY
- https://github.com/opencv/opencv/issues/10479 WEB
- https://github.com/opencv/opencv/pull/10480/commits/4ca89db22dea962690f31c1781bce5937ee91837 WEB
- https://github.com/opencv/opencv-python PACKAGE
- http://www.securityfocus.com/bid/106945 WEB
- https://pypi.org/project/opencv-python PACKAGE
- https://github.com/advisories/GHSA-83rh-hx5x-q9p5 ADVISORY
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — PyPA Advisory Database |