CVE-2017-1000450: Integer Overflow
In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-1000450?
CVE-2017-1000450 is a vulnerability in the OpenCV library that allows for integer overflow, potentially leading to remote code execution or denial of service.
What functions in OpenCV are affected by CVE-2017-1000450?
The functions FillUniColor and FillUniGray in opencv/modules/imgcodecs/src/utils.cpp are affected by CVE-2017-1000450.
Which versions of OpenCV are affected by CVE-2017-1000450?
OpenCV 3.3 and earlier versions are affected by CVE-2017-1000450.
How severe is CVE-2017-1000450?
CVE-2017-1000450 has a severity rating of 8.8 (high) out of 10.
How can I fix CVE-2017-1000450?
To fix CVE-2017-1000450, you should update to a version of OpenCV that is not affected by this vulnerability.