Formal Verification of CNN-based Perception Systems