Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-2617
HistoryMay 10, 2023 - 6:15 a.m.

CVE-2023-2617

2023-05-1006:15:16
Alpine Linux Development Team
security.alpinelinux.org
10
opencv
wechat_qrcode
vulnerability
decodedbitstreamparser
null pointer dereference
remote attack
exploit
patch
vdb-228547
unix

0.002 Low

EPSS

Percentile

55.1%

A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-228547.

OSVersionArchitecturePackageVersionFilename
Alpine3.17-communitynoarchopencv= 4.6.0-r3UNKNOWN
Alpine3.18-communitynoarchopencv= 4.7.0-r6UNKNOWN

0.002 Low

EPSS

Percentile

55.1%