CVSS 3.1
8.8 highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVE-2017-12864
In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Severity
- EPSS
- 2.7% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- debian:debian_linux
- opencv:opencv
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-267x-w5hx-8hjr | PyPI | opencv-python | <3.3.1.11 | 3.3.1.11 |
| GHSA-267x-w5hx-8hjr | PyPI | opencv-contrib-python | <3.3.1.11 | 3.3.1.11 |
| PYSEC-2026-2804 | PyPI | opencv-python | <3.3.1.11 | 3.3.1.11 |
| PYSEC-2026-697 | PyPI | opencv-contrib-python | <3.3.1.11 | 3.3.1.11 |