CVE-2017-14136: Out-of-bounds Write

October 12, 2021

OpenCV (Open Source Computer Vision Library) has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.

References

github.com/advisories/GHSA-634c-v2xv-ffpg
github.com/opencv/opencv/issues/9443
github.com/opencv/opencv/pull/9448
github.com/xiaoqx/pocs/blob/master/opencv.md
lists.debian.org/debian-lts-announce/2018/07/msg00030.html
nvd.nist.gov/vuln/detail/CVE-2017-14136
security.gentoo.org/glsa/201712-02

Code Behaviors & Features

Detect and mitigate CVE-2017-14136 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →