Heap-based Buffer Overflow in OpenCV Affects Jpeg2KDecoder Functionality
CVE-2018-5268

5.5MEDIUM

Key Information:

Vendor

Opencv

Status
Opencv
Vendor
CVE Published:
8 January 2018

What is CVE-2018-5268?

A heap-based buffer overflow vulnerability exists in OpenCV version 3.3.1 within the cv::Jpeg2KDecoder::readComponent8u function, potentially allowing an attacker to exploit crafted image files. This vulnerability occurs during the parsing process of specially crafted JPEG2000 images, which can lead to arbitrary code execution or application crashes.

References

https://lists.debian.org/debian-lts-announce/2018/07/msg0...
mailing-listx_refsource_MLIST
http://www.securityfocus.com/bid/106945
vdb-entryx_refsource_BID
https://github.com/opencv/opencv/issues/10541
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.