CVE-2017-18009
Fixed in a distro release EPSS 2%
In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.
Products: opencv
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | opencv-contrib-python | 3.4.1.15 |
| PyPI | opencv-python | 3.4.1.15 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | opencv | 4.1.2+dfsg-3 |
| Debian 13 | opencv | 4.1.2+dfsg-3 |
| Debian 14 | opencv | 4.1.2+dfsg-3 |
| Ubuntu Pro 14.04 LTS | opencv | 2.4.8+dfsg1-2ubuntu1.2+esm1 |
| Ubuntu Pro 16.04 LTS | opencv | 2.4.9.1+dfsg-1.5ubuntu1.1+esm1 |
| Ubuntu Pro 18.04 LTS | opencv | 3.2.0+dfsg-4ubuntu0.1+esm3 |