CVE-2017-12602: Denial of Service in OpenCV
Summary
CVE-2017-12602: Denial of Service in OpenCV. Affects opencv-python versions < 3.3.1.11. Fixed in 3.3.1.11. How to fix ↓
Also tracked for
- opencv-contrib-python · PyPI
- opencv · Debian:11
The same CVE-2017-12602 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenCV (Open Source Computer Vision Library) is a popular open-source library for computer vision and machine learning algorithms. It provides a wide range of functions and tools for image and video processing, object detection, and more. OpenCV-Python is the Python wrapper for OpenCV. However, versions up to 3.3 (including OpenCV-Python 3.3.0.9) are vulnerable to a denial of service (memory consumption) issue.
Vulnerability Detail
The vulnerability in OpenCV allows an attacker to trigger a denial of service attack by exploiting a memory consumption issue. This can lead to the exhaustion of system resources, causing the application to crash or become unresponsive. The vulnerability is identified as CVE-2017-12602 and has a CVSS score of 7.5 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The issue was discovered and reported on October 12, 2021.
How To Fix
Latest published version: 5.0.0.93 as of 23 Oct 2026
pip install --upgrade "opencv-python==5.0.0.93"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
3.3.1.11
This is the first release that contains the fix.
pip install --upgrade "opencv-python==3.3.1.11"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround provided for this vulnerability. It is crucial to update the affected packages to the fixed versions to mitigate the risk of a denial of service attack.
Conclusion
The vulnerability in OpenCV (CVE-2017-12602) poses a risk of denial of service attacks due to a memory consumption issue. It is crucial to update the affected packages to version 3.3.1.11 or higher to mitigate this vulnerability. For further support and assistance in vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for opencv-python →
FAQ
OpenCV is an open-source computer vision library that provides various functions and tools for image and video processing, object detection, and more.
The vulnerability can be exploited to trigger a denial of service attack, leading to the exhaustion of system resources and potential application crashes or unresponsiveness.
To fix the vulnerability, update the affected packages to version 3.3.1.11 or higher. This will address the memory consumption issue and ensure the proper functioning of OpenCV.
No specific workaround is provided for this vulnerability. It is recommended to update the affected packages to the fixed versions.
For more information about this vulnerability, you can refer to the CVE-2017-12602 advisory and the OpenCV documentation.
References
Related vulnerabilities
Recent vulnerabilities recorded for opencv-python.
