CVE-2019-14493

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

CVE-2019-14492

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14492

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14492

CVE-2019-14492 affects OpenCV before 3.4.7 and 4.x before 4.1.1, caused by an out-of-bounds read/write in HaarEvaluator::OptFeature::calc (cascadedetect.hpp), leading to denial of service. Public references in multiple advisories (SUSE/SLED/SLES updates, Ubuntu USN-4818-1, Red Hat/Nessus entries)...

CVE-2019-14491

OpenCV prior to 3.4.7 and 4.x prior to 4.1.1 contains an out-of-bounds read in cv::predictOrderedcv::HaarEvaluator within modules/objdetect/src/cascadedetect.hpp, which can lead to denial of service. The vulnerability affects OpenCV’s Haar feature evaluation path used in object detection; multipl...

CVE-2019-14491

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14491

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

PT-2019-6434

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.1.1 Description An issue was discovered in the function cv::XMLParser::parse at modules/core/src/persistence.cpp, which is related to errors in pointer dereferencing. This issue can be exploited by a remote attacker ...

opencv/imread_fuzzer: Use-of-uninitialized-value in cv::ExrDecoder::readData

Detailed report: https://oss-fuzz.com/testcase?key=5744080958521344 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cv::ExrDecoder::readData...

abe-cli (>=2.11.3 <=2.14.2), abeadfab (>=2.16.15 <=3.7.20) +25 more potentially affected by unknown CVE via opencv (>=0.0.12 <=5.0.0)

opencv NPM version =0.0.12, =2.11.3, =2.16.15, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =0.0.2, =1.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F698-M2V9-5FH3...

Command Injection in opencv

Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. Recommendation Upgrade to version 6.1.0...

GHSA-F698-M2V9-5FH3 Command Injection in opencv

Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. Recommendation Upgrade to version 6.1.0...

PT-2019-6432

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.1.1 OpenCV-Python versions prior to 4.1.0.25 Description An out-of-bounds read issue was discovered in the calc and ocl calc functions within the dis flow.cpp component of OpenCV. This occurs because the coarsest sca...

opencv/imread_fuzzer: Crash in _TIFFmemset

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5760646009847808 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe0ecdf77d0 Crash...

opencv/imread_fuzzer: Crash in TIFFReadRGBATileExt

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5729601348698112 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f97d1e3e903 Crash...

opencv/imdecode_fuzzer: Incorrect-function-pointer-type in cv::Mat::convertTo

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5643625308880896 Project: opencv Fuzzer: libFuzzerimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash...

opencv/imdecode_fuzzer: Crash in DumpModeDecode

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5693078825861120 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

CVE-2017-18009

In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmthdr.cpp...

opencv/imdecode_fuzzer: Heap-buffer-overflow in Luv32toXYZ

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5638950225444864 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cras...

opencv/imdecode_fuzzer: Heap-buffer-overflow in LogLuv24toXYZ

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5637208565874688 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cras...