PT-2019-6435

🗓️ 23 Jul 2019 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Out-of-bounds read/write in a cascade detector feature may cause remote denial of service.

Reporter	Title	Published	Views	Family All 129
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in OpenCV shipped with PowerAI	22 Jan 202018:27	–	ibm
AstraLinux	Astra Linux – Vulnerability in OpenCV	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux – Vulnerability in OpenCV	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux – Vulnerability in OpenCV	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the `cv::XMLParser::parse` function in the `modules/core/src/persistence.cpp` file of the OpenCV library, a open-source computer vision and image processing software, relates to pointer dereferencing errors. This vulnerability allows attackers to trigger a service denial.	13 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OptFeature() function in the objdetect/src/cascadedetect.hpp component of the computer vision algorithm library OpenCV, which involves reading data beyond the allowed buffer limits, allows a malicious actor to cause a service failure.	13 Sep 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the predictOrdered() function in the objdetect/src/cascadedetect.hpp component of the computer vision algorithm library OpenCV, which involves reading data beyond the allowed buffer limits. This vulnerability allows attackers to access confidential data and also trigger a service failure.	13 Sep 202400:00	–	bdu_fstec
CNVD	OpenCV Out-of-Bounds Read Vulnerability	2 Aug 201900:00	–	cnvd
CNVD	OpenCV Out-of-Bounds Read/Write Vulnerability	2 Aug 201900:00	–	cnvd
CNVD	OpenCV Null Pointer Dereference Vulnerability	2 Aug 201900:00	–	cnvd

Source	Link
osv	www.osv.dev/vulnerability/MGASA-2020-0030
lists	www.lists.opensuse.org/opensuse-updates/2019-12/msg00073.html
github	www.github.com/opencv/opencv/issues/15124
github	www.github.com/opencv/opencv/commit/ac425f67e4c1d0da9afb9203f0918d8d57c067ed
bugs	www.bugs.mageia.org/show_bug.cgi
bdu	www.bdu.fstec.ru/vul/2024-06971
github	www.github.com/opencv/opencv/compare/33b765d...4a7ca5a
osv	www.osv.dev/vulnerability/USN-4818-1
ubuntu	www.ubuntu.com/security/CVE-2019-14493
bugzilla	www.bugzilla.suse.com/1144348

02 Jul 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

CVSS 26.4

CVSS 38.2

EPSS0.0337

out of bounds cascade detector denial of service remote attacker version updates