CVE-2025-53644 OpenCV contains a use after free buffer write due to an uninitialized pointer

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

CVE-2025-53644

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability...

PT-2025-29939 · Opencv · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV versions prior to 4.12.0 Description: OpenCV, an Open Source Computer Vision Library, contains an issue where an uninitialized pointer variable on the stack can lead to an arbitrary heap buffer write when processing crafted JPEG images...

OpenCV 安全漏洞

OpenCV is an open source, cross-platform, lightweight computer vision library from OpenCV Open Source. A security vulnerability exists in OpenCV versions prior to 4.12.0, which stems from an uninitialized pointer variable that could result in an arbitrary heap buffer write...

PT-2025-29870 · Git +1 · Opencv

Name of the Vulnerable Software and Affected Versions: OpenCV affected versions not specified Description: The software experiences an UNKNOWN READ crash during the cv::PngDecoder::compose frame function call within the cv::ParallelLoopBodyWrapper::operator and cv::ThreadPool::run processes...

TencentOS Server 4: opencv (TSSA-2024:0353)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0353 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

CVE-2019-10061

utils/find-opencv.js in node-opencv aka OpenCV bindings for Node.js prior to 6.1.0 is vulnerable to Command Injection. It does not validate user input allowing attackers to execute arbitrary commands...

Linux Distros Unpatched Vulnerability : CVE-2019-15939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. CVE-2019-1593...

Linux Distros Unpatched Vulnerability : CVE-2019-14492

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in...

Linux Distros Unpatched Vulnerability : CVE-2017-12604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by...

Linux Distros Unpatched Vulnerability : CVE-2017-12600

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenCV Open Source Computer Vision Library through 3.3 has a denial of service CPU consumption issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case...

Linux Distros Unpatched Vulnerability : CVE-2017-12598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in...

Linux Distros Unpatched Vulnerability : CVE-2017-1000450

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the imag...

Linux Distros Unpatched Vulnerability : CVE-2017-12599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds read error in the function icvCvtBGRA2BGR8uC4C3R when reading an image file by using...

Linux Distros Unpatched Vulnerability : CVE-2019-14491

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in...

Linux Distros Unpatched Vulnerability : CVE-2017-12606

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenCV Open Source Computer Vision Library through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by...

Linux Distros Unpatched Vulnerability : CVE-2017-12601

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenCV Open Source Computer Vision Library through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmtbmp.cpp when...

Linux Distros Unpatched Vulnerability : CVE-2019-19624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within t...

Linux Distros Unpatched Vulnerability : CVE-2018-5269

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast. CVE-2018-526...

Linux Distros Unpatched Vulnerability : CVE-2016-1517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenCV 3.0.0 allows remote attackers to cause a denial of service segfault via vectors involving corrupt chunks. CVE-2016-1517 Note that Nessus relies on the...