CVE-2017-12863

In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.

• CWE-190

• https://github.com/opencv/opencv/issues/9371Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/07/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/10/msg00028.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201712-02Third Party Advisory
• https://github.com/opencv/opencv/issues/9371Issue Tracking, Patch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/07/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/10/msg00028.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/201712-02Third Party Advisory

Published

Aug 15, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12858Double free vulnerability in the _zip_dirent_read function i…9.8
• CVE-2017-12859NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in …
• CVE-2017-1286Sensitive information about the configuration of the IBM Urb…
• CVE-2017-12860The Epson "EasyMP" software is designed to remotely stream a…
• CVE-2017-12861The Epson "EasyMP" software is designed to remotely stream a…
• CVE-2017-12862In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer…8.8
• CVE-2017-12864In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function Read…8.8
• CVE-2017-12865Stack-based buffer overflow in "dnsproxy.c" in connman 1.34 …9.8
• CVE-2017-12867The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp …
• CVE-2017-12868The secureCompare method in lib/SimpleSAML/Utils/Crypto.php …
• CVE-2017-12869The multiauth module in SimpleSAMLphp 1.14.13 and earlier al…
• CVE-2017-1287IBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to…