CVE-2017-1000450

Name	CVE-2017-1000450
Description	In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-1235-1, DLA-1438-1, DLA-2799-1
Debian Bugs	886282

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
opencv (PTS)	bullseye	4.5.1+dfsg-5	fixed
	bookworm	4.6.0+dfsg-12	fixed
	sid, trixie	4.6.0+dfsg-14	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
opencv	source	experimental	3.4.4+dfsg-1~exp1
opencv	source	wheezy	2.3.1-11+deb7u3	DLA-1235-1
opencv	source	jessie	2.4.9.1+dfsg-1+deb8u2	DLA-1438-1
opencv	source	stretch	2.4.9.1+dfsg1-2+deb9u1	DLA-2799-1
opencv	source	(unstable)	3.2.0+dfsg-6		886282

Notes

https://github.com/opencv/opencv/issues/9723
https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor
https://github.com/opencv/opencv/pull/9726