Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV

高 8.8CVE-2017-12601 · GHSA-w96g-3p64-63wr · PYSEC-2026-2831 · 07/08/2017 公開 · 17/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
opencv-contrib-python PyPI	`< 3.3.1.11`	`3.3.1.11`
opencv-python PyPI	`< 3.3.1.11`	`3.3.1.11`
opencv opencv	`≤ 3.3.0`	修正版なし

概要

OpenCV (Open Source Computer Vision Library) through 3.3 (corresponding to OpenCV-Python 3.3.0.9) has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.

NVD の説明

OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.