PYSEC-2026-2821 Out-of-bounds Read and Out-of-bounds Write in OpenCV

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-19624

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of t...

Out-of-bounds

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of t...

OpenCV Out-of-Bounds Read/Write Vulnerability

OpenCV is a cross-platform computer vision library. An out-of-bounds read/write vulnerability exists in the HaarEvaluator::OptFeature::calc function in modules/objdetect/src/cascadedetect.hpp in OpenCV. An attacker could exploit this vulnerability to cause a denial of service...

PT-2019-6432

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.1.1 OpenCV-Python versions prior to 4.1.0.25 Description An out-of-bounds read issue was discovered in the calc and ocl calc functions within the dis flow.cpp component of OpenCV. This occurs because the coarsest sca...

CVE-2016-10548

Arbitrary code execution is possible in reduce-css-calc node module =1.2.4 through crafted css. This makes cross sites scripting XSS possible on the client and arbitrary code injection possible on the server and user input is passed to the calc function...

CVE-2016-10548

Arbitrary code execution is possible in reduce-css-calc node module =1.2.4 through crafted css. This makes cross sites scripting XSS possible on the client and arbitrary code injection possible on the server and user input is passed to the calc function...

PT-2018-4726

Name of the Vulnerable Software and Affected Versions reduce-css-calc versions =1.2.4 Description Arbitrary code execution is possible through crafted CSS, making cross-site scripting XSS possible on the client and arbitrary code injection possible on the server. This occurs because user input is...

CVE-2016-10548: Improper Control of Generation of Code

Arbitrary code execution is possible in reduce-css-calc node module =1.2.4 through crafted css. This makes cross sites scripting XSS possible on the client and arbitrary code injection possible on the server and user input is passed to the calc function...