# CVE-2017-12864: libopencv3.2-java: In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to i... CVE-2017-12864 is fixed in 23 products on 1 platform, first by libopencv-calib3d3.2 3.2.0+dfsg-4ubuntu0.1, released January 7, 2018. It is not reported as exploited. Patch Radar priority: Routine. - Web page: https://patchblox.com/security/cve/CVE-2017-12864 - Priority: Routine - CVSS: n/a (Medium) - EPSS: 0.0272 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Aug 15, 2017 ## Description In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier. ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | libopencv-calib3d3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-calib3d3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-calib3d3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-contrib3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-contrib3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-contrib3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-core3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-core3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-core3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-features2d3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-features2d3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-features2d3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-flann3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-flann3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-flann3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-highgui3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-highgui3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-highgui3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-imgcodecs3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-imgcodecs3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-imgcodecs3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-imgproc3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-imgproc3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-imgproc3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-ml3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-ml3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-ml3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-objdetect3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-objdetect3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-objdetect3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-photo3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-photo3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-photo3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-shape3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-shape3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-shape3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-stitching3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-stitching3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-stitching3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-superres3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-superres3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-superres3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-video3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-video3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-video3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-videoio3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-videoio3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-videoio3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-videostab3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-videostab3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-videostab3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv-viz3.2 Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv-viz3.2 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv-viz3.2-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv3.2-java Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv3.2-java 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv3.2-java-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | libopencv3.2-jni Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [libopencv3.2-jni 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libopencv3.2-jni-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | opencv-data Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [opencv-data 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-opencv-data-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | python-opencv Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [python-opencv 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python-opencv-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | | Linux | python3-opencv Ubuntu 18.04.6 LTS (bionic) | 3.2.0+dfsg-4ubuntu0.1 | [python3-opencv 3.2.0+dfsg-4ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-python3-opencv-3.2.0-dfsg-4ubuntu0.1.md) | Jan 7, 2018 | --- Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo