CVE-2017-12598: High severity OpenCV Opencv vulnerability
OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12598?
CVE-2017-12598 is classified as a medium severity vulnerability due to its potential for causing out-of-bounds read errors.
How do I fix CVE-2017-12598?
To fix CVE-2017-12598, update OpenCV to version 3.4.0 or later which includes the necessary patches.
What systems are affected by CVE-2017-12598?
CVE-2017-12598 affects OpenCV versions up to and including 3.3.0 and also impacts Debian versions 8.0 and 9.0.
What type of vulnerability is CVE-2017-12598?
CVE-2017-12598 is an out-of-bounds read vulnerability found in the cv::RBaseStream::readBlock function.
Can CVE-2017-12598 be exploited remotely?
CVE-2017-12598 can be exploited if an attacker can provide a specially crafted image file to the cv::imread function.