{"id":"CVE-2017-17760","details":"OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.","aliases":["GHSA-jcxv-2j3h-mg59"],"modified":"2026-04-10T03:58:02.058892Z","published":"2017-12-29T18:29:00.460Z","references":[{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/01/msg00008.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00030.html"},{"type":"ADVISORY","url":"https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html"},{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/102974"},{"type":"REPORT","url":"https://github.com/opencv/opencv/issues/10351"},{"type":"FIX","url":"https://github.com/opencv/opencv/pull/10369/commits/7bbe1a53cfc097b82b1589f7915a2120de39274c"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/opencv/opencv","events":[{"introduced":"0"},{"last_affected":"af4d6f34d8d05b0a9a0278728823272e49a63898"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"3.3.1"}]}}],"versions":["2.2","3.2.0-rc","3.3.0-rc","3.3.1-cvsdk"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-17760.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"7.0"}]},{"events":[{"introduced":"0"},{"last_affected":"8.0"}]},{"events":[{"introduced":"0"},{"last_affected":"9.0"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}