VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 15, 2017· Updated Jun 17, 2026

CVE-2017-12863

CVE-2017-12863

Description

In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
opencv-pythonPyPI
< 3.3.1.113.3.1.11
opencv-contrib-pythonPyPI
< 3.3.1.113.3.1.11

Affected products

5
  • Opencv/Opencv
    cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*
    Range: <=3.3.0
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • ghsa-coords2 versions
    pkg:pypi/opencv-contrib-pythonpkg:pypi/opencv-python
    < 3.3.1.11+ 1 more
    • (no CPE)range: < 3.3.1.11
    • (no CPE)range: < 3.3.1.11

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.