CVE-2017-12597High· 8.8▾ TwilightOut-of-bounds Write in OpenCV
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
2.0%
2.0% → 2.0%
Last analysed / modified upstream
OpenCV (Open Source Computer Vision Library) through 3.3 (corresponding to opencv-python and opencv-contrib-python through 3.3.0.9) has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread.
opencv-python < 3.3.1.11opencv-contrib-python < 3.3.1.11Upgrade to a patched release:
opencv-python 3.3.1.11opencv-contrib-python 3.3.1.11Connected by shared product, vendor, weakness, or advisory.
CVE-2017-12863High· 8.8Integer Overflow or Wraparound in OpenCV
CVE-2017-12601High· 8.8Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
CVE-2017-12606High· 8.8Out-of-bounds Write in OpenCV
CVE-2017-12605High· 8.8Out-of-bounds Write in OpenCV
CVE-2017-12602High· 7.5Denial of Service in OpenCV
CVE-2017-1000450High· 8.8Integer Overflow or Wraparound in OpenCV.