Denial of Service Vulnerability in OpenCV Products by OpenCV

CVE-2018-7713

What is CVE-2018-7713?

The 'validateInputImageSize' function in OpenCV 3.4.1 introduces a vulnerability that allows remote attackers to trigger a denial of service through assertion failures. The specific condition that can be exploited occurs when the image width exceeds allowed limits, namely (size.width <= (1<<20)). Unlike typical assertions, OpenCV's CV_Assert operates as a C++ exception, leading to disruptions in the functioning of applications relying on this library when invalid or unsupported parameters are encountered. It is crucial for users of OpenCV to ensure their applications are safeguarded against this vulnerability by implementing appropriate validations and error handling.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References