CVE-2017-18009: High severity OpenCV Opencv vulnerability
In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmthdr.cpp.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/opencvto a version that resolves this vulnerability.Fixed in 4.5.1+dfsg-5Fixed in 4.6.0+dfsg-12Fixed in 4.6.0+dfsg-14Fixed in 4.10.0+dfsg-2
Event History
Frequently Asked Questions
What is CVE-2017-18009?
CVE-2017-18009 is a vulnerability in OpenCV 3.3.1 that allows a heap-based buffer over-read.
How severe is CVE-2017-18009?
CVE-2017-18009 has a severity rating of 7.5 (high).
Which software versions are affected by CVE-2017-18009?
OpenCV 3.3.1 is affected by CVE-2017-18009.
How can I fix CVE-2017-18009?
To fix CVE-2017-18009, update to a version of OpenCV that is not affected by the vulnerability.
Where can I find more information about CVE-2017-18009?
You can find more information about CVE-2017-18009 in the references provided: [link1](https://source.android.com/docs/security/bulletin/2019-02-01/#asterisk), [link2](https://source.android.com/docs/security/bulletin/2019-02-01), [link3](http://www.securityfocus.com/bid/106945).