High severity8.8NVD Advisory· Published Jan 2, 2018· Updated Jun 17, 2026
CVE-2017-1000450
CVE-2017-1000450
Description
In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
opencv-pythonPyPI | < 3.3.1.11 | 3.3.1.11 |
opencv-contrib-pythonPyPI | < 3.3.1.11 | 3.3.1.11 |
Affected products
2- ghsa-coords2 versions
< 3.3.1.11+ 1 more
- (no CPE)range: < 3.3.1.11
- (no CPE)range: < 3.3.1.11
Patches
Vulnerability mechanics
References
8- github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColornvdExploitThird Party AdvisoryWEB
- github.com/opencv/opencv/issues/9723nvdExploitIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-m43c-649m-pm48ghsaADVISORY
- lists.debian.org/debian-lts-announce/2018/01/msg00008.htmlnvdMailing ListThird Party AdvisoryWEB
- lists.debian.org/debian-lts-announce/2018/07/msg00030.htmlnvdMailing ListThird Party AdvisoryWEB
- lists.debian.org/debian-lts-announce/2021/10/msg00028.htmlnvdMailing ListThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2017-1000450ghsaADVISORY
- github.com/opencv/opencv/pull/9726/commits/c58152d94ba878b2d7d76bcac59146312199b9ebghsaWEB
News mentions
0No linked articles in our index yet.