# CVEs published 2017-08-15

6 CVEs were published on August 15, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-8665](https://cve.now/CVE-2017-8665.md): The Xamarin.iOS update component on systems running macOS allows an attacker to run arbitrary code as root, aka "Xamarin.iOS Elevation Of Pr (no CVSS, Microsoft Xamarin.iOS)
- [CVE-2017-12852](https://cve.now/CVE-2017-12852.md): The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation. (no CVSS, numpy)
- [CVE-2017-12855](https://cve.now/CVE-2017-12855.md): Xen maintains the \_GTF\_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. (no CVSS)
- [CVE-2017-12862](https://cve.now/CVE-2017-12862.md): In modules/imgcodecs/src/grfmt\_pxm.cpp, the length of buffer AutoBuffer \_src is small than expected, which will cause copy buffer overflow l (no CVSS, opencv-contrib-python · opencv-python)
- [CVE-2017-12863](https://cve.now/CVE-2017-12863.md): In opencv/modules/imgcodecs/src/grfmt\_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src\_pitch. (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-12864](https://cve.now/CVE-2017-12864.md): In opencv/modules/imgcodecs/src/grfmt\_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. (no CVSS, opencv-contrib-python · opencv-python)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-08-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
