Command injection

utils/find-opencv.js in node-opencv aka OpenCV bindings for Node.js prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands...

CVE-2019-10061

CVE-2019-10061 affects the Node.js OpenCV bindings (node-opencv). The vulnerable component is utils/find-opencv.js , with versions prior to 6.1.0 . Root cause: it does not validate user input, enabling attackers to execute arbitrary commands via a crafted input. Impact is described as Command Inj...

CVE-2019-10061

utils/find-opencv.js in node-opencv aka OpenCV bindings for Node.js prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands...

CVE-2019-10061

utils/find-opencv.js in node-opencv aka OpenCV bindings for Node.js prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands...

CVE-2019-10061: Improper Neutralization of Special Elements used in an OS Command

utils/find-opencv.js in node-opencv aka OpenCV bindings for Node.js prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands...

node-opencv command injection vulnerability

node-opencv is the OpenCV binding for Node.js. A command injection vulnerability exists in utils/find-opencv.js in versions of node-opencv prior to 6.1.0. The vulnerability stems from node-opencv failing to validate user input. An attacker can exploit the vulnerability to execute arbitrary comman...

Command Injection

Overview Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. Recommendation Upgrade to version 6.1.0. References GitHub Advisory...

opencv/imdecode_fuzzer: Negative-size-param in _TIFFmemcpy

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5766572742803456 Project: opencv Fuzzer: aflopencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash Stat...

opencv/imread_fuzzer: Use-of-uninitialized-value in Imf::copyIntoFrameBuffer

Detailed report: https://oss-fuzz.com/testcase?key=5141671744897024 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Imf::copyIntoFrameBuffer...

opencv/imread_fuzzer: Use-of-uninitialized-value in inflate

Detailed report: https://oss-fuzz.com/testcase?key=5708657289854976 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate uncompress2 uncompre...

opencv/imread_fuzzer: Use-of-uninitialized-value in adler32_z

Detailed report: https://oss-fuzz.com/testcase?key=5755561323266048 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: adler32z inflate ZIPDecode...

opencv/imdecode_fuzzer: Heap-buffer-overflow in jpc_dec_process_sot

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5727882976952320 Project: opencv Fuzzer: aflopencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

opencv/imdecode_fuzzer: Crash in jp2_box_get

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5665823442599936 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

opencv/imdecode_fuzzer: Use-of-uninitialized-value in cv::PAMDecoder::readHeader

Detailed report: https://oss-fuzz.com/testcase?key=5659354838073344 Project: opencv Fuzzer: libFuzzerimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cv::PAMDecoder::readHeader...

opencv/imread_fuzzer: Use-of-uninitialized-value in jp2_pclr_destroy

Detailed report: https://oss-fuzz.com/testcase?key=5635385212796928 Project: opencv Fuzzer: libFuzzerimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: jp2pclrdestroy jp2boxget jp2decode...

opencv/imread_fuzzer: Use-of-uninitialized-value in inflate

Detailed report: https://oss-fuzz.com/testcase?key=5633341317971968 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: inflate ZIPDecode...

opencv/imread_fuzzer: Crash in putgreytile

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5149889707638784 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fb914a7fb38 Crash...

opencv/imread_fuzzer: Use-of-uninitialized-value in cv::PAMDecoder::readHeader

Detailed report: https://oss-fuzz.com/testcase?key=5128776439037952 Project: opencv Fuzzer: libFuzzerimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cv::PAMDecoder::readHeader...

opencv/imread_fuzzer: Heap-buffer-overflow in gtTileSeparate

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5098633869918208 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

opencv/imread_fuzzer: Crash in TIFFReadRGBATileExt

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5069655658463232 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7f61333cf000...