USN-7247-1: OpenCV vulnerabilities

It was discovered that OpenCV did not properly manage certain XML data, leading to a NULL pointer dereference. If a user were tricked into loading a specially crafted file, a remote attacker could possibly use this issue to make OpenCV crash, resulting in a denial of service. This issue only...

Ubuntu 18.04 LTS / 22.04 LTS : OpenCV vulnerabilities (USN-7247-1)

The remote Ubuntu 18.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7247-1 advisory. It was discovered that OpenCV did not properly manage certain XML data, leading to a NULL pointer dereference. If a user were tricked into...

PT-2025-5650 · Opencv · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the cv::PngDecoder module, specifically in the read from io, read chunk, and readHeader functions. Recommendations:...

The vulnerability in the FillColorRow4 function of the utils.cpp component in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the FillColorRow4 function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to writing beyond buffer boundaries. Exploiting this vulnerability could allow an attacker to gain...

The vulnerability of the icvCvt_BGRA2BGR_8u_C4C3R function in the Open Source Computer Vision Library (OpenCV) allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the icvCvtBGRA2BGR8uC4C3R function in the Open Source Computer Vision Library OpenCV involves reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service...

The vulnerability of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to the issue of re-liberating memory. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, relates to repeated memory reclamation. Exploiting this vulnerability can allow remote attackers to gain access to confidential data, compromise its integrity, and cause...

The vulnerability in the component opencv/modules/imgcodecs/src/grfmt_pxm.cpp of the OpenCV library, which is part of the Open Source Computer Vision Library (OpenCV), allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the opencv/modules/imgcodecs/src/grfmtpxm.cpp file of the Computer Vision Library, which is part of the Open Source Computer Vision Library OpenCV, involves a numerical overflow issue. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

The vulnerability in the module imgcodecs/src/grfmt_pxm.cpp of the OpenCV library, which is used for computer vision, image processing, and numerical algorithms of general purpose, open-source nature, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the modules/imgcodecs/src/grfmtpxm.cpp component in the computer vision, image processing, and general numerical algorithms library Open Source Computer Vision Library OpenCV is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain...

The vulnerability in the `FillColorRow8` function of the `utils.cpp` component in the OpenCV library, which is used for computer vision, image processing, and numerical algorithms of general purpose, open-source nature, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the FillColorRow8 function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to buffer overflows. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability in the FillColorRow1 function of the utils.cpp component in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the FillColorRow1 function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to buffer overflows. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability in theutils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of theutils.cpp component in the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise i...

The vulnerability in the `opencv/modules/imgcodecs/src/grfmt_pxm.cpp` file of the Computer Vision Library, which is part of the Open Source Computer Vision Library (OpenCV), allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the opencv/modules/imgcodecs/src/grfmtpxm.cpp file of the Computer Vision Library, which is part of the Open Source Computer Vision Library OpenCV, involves a numerical overflow issue. Exploiting this vulnerability could allow an attacker to gain access to confidential data,...

The vulnerability of the predictOrdered() function in the objdetect/src/cascadedetect.hpp component of the computer vision algorithm library OpenCV, which involves reading data beyond the allowed buffer limits. This vulnerability allows attackers to access confidential data and also trigger a service failure.

The vulnerability of the predictOrdered function in the objdetect/src/cascadedetect.hpp component of the computer vision library OpenCV involves reading data beyond the permissible buffer size. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as...

The vulnerability of the `cv::HdrDecoder::checkSignature` function in the `imgcodecs/src/grfmt_hdr.cpp` component of the OpenCV computer vision library, related to reading beyond the allowed data buffer boundaries, allows a malicious actor to cause service failures.

The vulnerability of the cv::HdrDecoder::checkSignature function in the imgcodecs/src/grfmthdr.cpp component of the OpenCV computer vision library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to cause service failures...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in OpenCV

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of OpenCV Vulnerability Details CVEID:CVE-2023-2617 DESCRIPTION: OpenCV wechatqrcode Module is vulnerable to a denial of service, caused by a flaw in the DecodedBitStreamParser::decodeByteSegment function at...

GHSA-QR4W-53VH-M672 opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863

opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2...

opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863

opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2...

01os (>=0.0.3 <=0.0.14), 102218077-topsis (=0.0.1) +10711 more potentially affected by CVE-2023-4863 via opencv-python (>=3.4.10.35 <=4.8.0.76)

opencv-python PYPI version =3.4.10.35, =0.0.3, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.10.0, =0.10.0, =0.11.0 - a-cv2-easy-resize =0.10.0 and more Source cves: CVE-2023-4863 Source advisory: OSV:GHSA-QR4W-53VH-M672...

opencv-contrib-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863

opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1255 more potentially affected by CVE-2023-4863 via opencv-contrib-python (>=3.4.11.45 <=4.8.0.76)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2023-4863 Source advisory: OSV:GHSA-CXJF-X6JP-P7MC...