CVE-2017-18009: Out-of-bounds Read

October 12, 2021

In OpenCV, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

References

www.securityfocus.com/bid/106945
github.com/advisories/GHSA-83rh-hx5x-q9p5
github.com/opencv/opencv/issues/10479
github.com/opencv/opencv/pull/10480/commits/4ca89db22dea962690f31c1781bce5937ee91837
nvd.nist.gov/vuln/detail/CVE-2017-18009

Code Behaviors & Features

Detect and mitigate CVE-2017-18009 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →