CVE-2017-12601: Buffer Overflow
Published Aug 7, 2017
·Updated
OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.
Affected Software
3 affected components
OpenCV Opencv<=3.3.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Remediation
Patch Available
Event History
Aug 7, 2017
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12601?
CVE-2017-12601 is classified as a buffer overflow vulnerability, which can lead to potential code execution.
2
How do I fix CVE-2017-12601?
To fix CVE-2017-12601, update OpenCV to version 3.4 or later.
3
What software is affected by CVE-2017-12601?
CVE-2017-12601 affects OpenCV versions up to and including 3.3.0 and specific releases of Debian Linux 8.0 and 9.0.
4
What happens if I exploit CVE-2017-12601?
Exploiting CVE-2017-12601 can allow an attacker to execute arbitrary code on the affected system.
5
Is there a known exploit for CVE-2017-12601?
Yes, there are documented test cases demonstrating an exploit for CVE-2017-12601.