Out-of-Bounds Read Vulnerability in OpenCV Image Processing Library

CVE-2017-12598

What is CVE-2017-12598?

The OpenCV Library version 3.3 contains an out-of-bounds read vulnerability in the cv::RBaseStream::readBlock function within the imgcodecs module. This flaw can be triggered when reading image files via the cv::imread function, leading to potential leaks of sensitive information or application crashes. This issue has been demonstrated by specific test cases, including the 8-opencv-invalid-read-fread test case. To mitigate this vulnerability, users are advised to update to the latest version of OpenCV.

References