CVE-2018-5269Medium· 5.5▾ SunlitReachable Assertion in OpenCV.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
1.4%
1.4% → 1.4%
Last analysed / modified upstream
In OpenCV 3.3.1 (corresponds with OpenCV-Python 3.3.1.11), an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast.
opencv-python < 3.4.1.15opencv-contrib-python < 3.4.1.15Upgrade to a patched release:
opencv-python 3.4.1.15opencv-contrib-python 3.4.1.15Connected by shared product, vendor, weakness, or advisory.
CVE-2017-12863High· 8.8Integer Overflow or Wraparound in OpenCV
CVE-2017-12601High· 8.8Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
CVE-2017-12606High· 8.8Out-of-bounds Write in OpenCV
CVE-2017-12605High· 8.8Out-of-bounds Write in OpenCV
CVE-2017-1000450High· 8.8Integer Overflow or Wraparound in OpenCV.
CVE-2017-17760Medium· 6.5Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV