Invalid Write Vulnerability in OpenCV Affects Multiple Versions

CVE-2017-12603

What is CVE-2017-12603?

An issue in the OpenCV Library allows for an invalid write operation in the cv::RLByteStream::getBytes function located in the imgcodecs module. This vulnerability occurs when improperly handling image files during the reading process via the cv::imread function. Such exploitation could potentially lead to memory corruption, thereby increasing the likelihood of unexpected behavior or security breaches. Developers utilizing OpenCV should ensure they are on supported versions and apply necessary security patches.

References