CVE-2025-53644

CVE-2025-53644 affects OpenCV (Open Source Computer Vision Library). Versions 4.10.0 and 4.11.0 contain an uninitialized pointer on the stack that may cause arbitrary heap buffer writes when reading crafted JPEG images. Version 4.12.0 includes the fix. Practical impact is high, involving potentia...

CVE-2025-53644

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

CVE-2025-53644

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

PT-2025-29939

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.12.0 Description OpenCV, an Open Source Computer Vision Library, contains an issue where an uninitialized pointer variable on the stack can lead to an arbitrary heap buffer write when processing crafted JPEG images...

OpenCV 安全漏洞

OpenCV is an open source, cross-platform, lightweight computer vision library from OpenCV Open Source. A security vulnerability exists in OpenCV versions prior to 4.12.0, which stems from an uninitialized pointer variable that could result in an arbitrary heap buffer write...

CVE-2025-53644: Use of Uninitialized Variable

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

opencv:core_fuzzer: Crash in std::__1::__function::__func<cv::PngDecoder::compose_frame

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5336178599723008 Project: opencv Fuzzing Engine: afl Fuzz Target: corefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x5130f9000940 Crash State:...

opencv:core_fuzzer: Heap-buffer-overflow in cv::PngDecoder::row_fn

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6613179751006208 Project: opencv Fuzzing Engine: afl Fuzz Target: corefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x504000000640 Crash Stat...

PT-2025-29870 · Git +1 · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV affected versions not specified Description: The software experiences an UNKNOWN READ crash during the cv::PngDecoder::compose frame function call within the cv::ParallelLoopBodyWrapper::operator and cv::ThreadPool::run processes...

opencv:core_fuzzer: Crash in std::__1::__function::__func<cv::PngDecoder::compose_frame

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6453159218446336 Project: opencv Fuzzing Engine: afl Fuzz Target: corefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x50c67e7e83f8 Crash State:...

opencv:imdecode_fuzzer: Bad-cast to cv::PngDecoder from invalid vptr in cv::PngDecoder::readData

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=6008590106427392 Project: opencv Fuzzing Engine: libFuzzer Fuzz Target: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Bad-cast Crash Address: 0x5b0893119561 Crash State:...

TencentOS Server 4: opencv (TSSA-2024:0353)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0353 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

opencv:imread_fuzzer: Global-buffer-overflow in cv::hal::opt_AVX2::CvtColorLoop_Invoker<cv::hal::opt_AVX2::RGB2RGB<unsigned char

Detailed Report: https://oss-fuzz.com/testcase?key=6617499678605312 Project: opencv Fuzzing Engine: afl Fuzz Target: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Global-buffer-overflow READ Crash Address: 0x55f1be81b9e7 Crash State:...

CVE-2019-10061

utils/find-opencv.js in node-opencv aka OpenCV bindings for Node.js prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands...

opencv:imread_fuzzer: Heap-buffer-overflow in cv::GifDecoder::lzwDecode

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=4746219868192768 Project: opencv Fuzzing Engine: afl Fuzz Target: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x5160000023b4 Crash...

opencv:imread_fuzzer: Heap-use-after-free in cv::PngDecoder::readData

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5060698371850240 Project: opencv Fuzzing Engine: honggfuzz Fuzz Target: imreadfuzzer Job Type: honggfuzzasanopencv Platform Id: linux Crash Type: Heap-use-after-free READ 12 Crash Address:...

opencv:imdecode_fuzzer: Container-overflow in cv::GifDecoder::lzwDecode

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=4519276212191232 Project: opencv Fuzzing Engine: afl Fuzz Target: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Container-overflow WRITE 1 Crash Address: 0x7e3bdb2df024 Crash...

PT-2025-11311

Name of the Vulnerable Software and Affected Versions OpenCV affected versions not specified Description The software contains a heap-buffer-overflow read issue. The crash state indicates the issue occurs within the cv::PngDecoder::compose frame function, triggered by...

opencv:core_fuzzer: Heap-buffer-overflow in std::__1::__function::__func<cv::PngDecoder::compose_frame

Project: https://github.com/opencv/opencv.git Detailed Report: https://oss-fuzz.com/testcase?key=5098242316763136 Project: opencv Fuzzing Engine: afl Fuzz Target: corefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x531000038fac Crash Stat...

Linux Distros Unpatched Vulnerability : CVE-2019-15939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. CVE-2019-1593...