OSV-2025-17

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/opencv/OSV-2025-17.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-17
Published
2025-01-08T00:14:02.009521Z
Modified
2025-01-08T00:14:02.009997Z
Summary
Heap-buffer-overflow in cv::PngDecoder::readHeader
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=387626408

Crash type: Heap-buffer-overflow READ 2
Crash state:
cv::PngDecoder::readHeader
cv::imdecode_
cv::imdecode
References

Affected packages

OSS-Fuzz / opencv

Package

Name
opencv
Purl
pkg:generic/opencv

Affected ranges

Type
GIT
Repo
https://github.com/opencv/opencv.git
Events
Introduced
d39aae6bdfc1a45553e1426334a9c72848354261
Fixed
f00814e38db556ad7a31e6dee203e41eea48e7a6

Affected versions

4.*

4.11.0

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific 

{
    "introduced_range": "9c33baebbd262ed6f45436cf71d5f7a50907e9fe:8bc65a1d136c2ac4c31910ee271b5f3c9d14317e",
    "fixed_range": "bdb6a968ce69a2bf7c34724f9052c20e941ab47b:f00814e38db556ad7a31e6dee203e41eea48e7a6"
}