CVE-2017-12863: Integer Overflow
In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function PxMDecoder::readData has an integer overflow when calculate srcpitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12863?
CVE-2017-12863 is classified as a high-severity vulnerability due to its potential for remote code execution or denial of service.
How do I fix CVE-2017-12863?
To fix CVE-2017-12863, upgrade to OpenCV version 3.4.0 or later, which addresses the integer overflow issue.
What versions are affected by CVE-2017-12863?
CVE-2017-12863 affects OpenCV 3.3 and earlier versions, as well as certain Debian Linux versions 8.0 and 9.0.
What impact does CVE-2017-12863 have on my system?
Exploitation of CVE-2017-12863 can lead to remote code execution or cause denial of service if a vulnerable OpenCV library processes a malicious image.
Is CVE-2017-12863 a local or remote vulnerability?
CVE-2017-12863 is a remote vulnerability because it can be triggered by processing images from remote sources.