CVE catalog
CVE-2018-7714
UBUNTU-CVE-2018-7714
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 2.23% · Oct 25, 2026
The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (pixels <= (1<<30)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | opencv | pro | 2.4.5+dfsg-0ubuntu4 | vulnerable |
| Ubuntu | opencv | pro | 2.4.5+dfsg-0ubuntu5 | vulnerable |
| Ubuntu | opencv | pro | 2.4.6.1+dfsg-2ubuntu2 | vulnerable |
| Ubuntu | opencv | pro | 2.4.6.1+dfsg-2ubuntu3 | vulnerable |
| Ubuntu | opencv | pro | 2.4.6.1+dfsg-2ubuntu4 | vulnerable |
| Ubuntu | opencv | pro | 2.4.6.1+dfsg-2ubuntu5 | vulnerable |
| Ubuntu | opencv | pro | 2.4.8+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | opencv | pro | 2.4.8+dfsg1-2ubuntu1 | vulnerable |
| Ubuntu | opencv | pro | 2.4.8+dfsg1-2ubuntu1.2 | vulnerable |
| Ubuntu | opencv | pro | 2.4.8+dfsg1-2ubuntu1.2+esm1 | vulnerable |
| Ubuntu | opencv | pro | 2.4.9+dfsg-1ubuntu6 | vulnerable |
| Ubuntu | opencv | pro | 2.4.9.1+dfsg-1.2ubuntu1 | vulnerable |
| Ubuntu | opencv | pro | 2.4.9.1+dfsg-1.3ubuntu1 | vulnerable |
| Ubuntu | opencv | pro | 2.4.9.1+dfsg-1.5ubuntu1 | vulnerable |
| Ubuntu | opencv | pro | 2.4.9.1+dfsg-1.5ubuntu1.1 | vulnerable |
| Ubuntu | opencv | pro | 2.4.9.1+dfsg-1.5ubuntu1.1+esm1 | vulnerable |
| Ubuntu | opencv | pro | 3.1.0+dfsg1-1~exp1ubuntu3 | vulnerable |
| Ubuntu | opencv | pro | 3.2.0+dfsg-3 | vulnerable |
| Ubuntu | opencv | pro | 3.2.0+dfsg-4 | vulnerable |
| Ubuntu | opencv | pro | 3.2.0+dfsg-4build1 | vulnerable |
| Ubuntu | opencv | pro | 3.2.0+dfsg-4build2 | vulnerable |
| Ubuntu | opencv | pro | 3.2.0+dfsg-4ubuntu0.1 | vulnerable |
| Ubuntu | opencv | pro | 3.2.0+dfsg-4ubuntu0.1+esm2 | vulnerable |
| Ubuntu | opencv | pro | 3.2.0+dfsg-4ubuntu0.1+esm3 | vulnerable |
| Ubuntu | opencv | pro | 3.2.0+dfsg-4ubuntu0.1+esm4 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: