DLA-2799-1 opencv - security update

Bulletin has no description...

Out-of-bounds Write in OpenCV.

In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...

GHSA-9G8H-PJM4-Q92P Out-of-bounds Write in OpenCV.

In OpenCV 3.3.1 corresponding with OpenCV-Python 3.3.1.11, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmtjpeg2000.cpp when parsing a crafted image file...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +117 more potentially affected by CVE-2019-5064 via opencv-contrib-python-headless (>=3.4.18.65 <=4.1.2.30)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1101 more potentially affected by CVE-2019-5064 via opencv-contrib-python (>=3.4.11.45 <=4.1.2.30)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

a-cv-imwrite-imread-plus (=0.12.0), aana (>=0.2.1 <=0.2.4) +3127 more potentially affected by CVE-2019-5064 via opencv-python-headless (>=3.4.3.18 <=4.1.2.30)

opencv-python-headless PYPI version =3.4.3.18, =0.2.1, =1.0.0, =0.17.3, =0.0.1.44, =0.0.1, =0.0.1, =0.2.1, =0.2.0, =0.3.0, =0.1.0, =0.1.2 and more Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

01os (>=0.0.3 <=0.0.14), 102218077-topsis (=0.0.1) +10213 more potentially affected by CVE-2019-5064 via opencv-python (>=3.4.10.35 <=4.1.2.30)

opencv-python PYPI version =3.4.10.35, =0.0.3, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.10.0, =0.10.0, =0.11.0 - a-cv2-easy-resize =0.10.0 and more Source cves: CVE-2019-5064 Source advisory: OSV:GHSA-Q799-Q27X-VP7W...

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

GHSA-Q799-Q27X-VP7W Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +117 more potentially affected by CVE-2019-5063 via opencv-contrib-python-headless (>=3.4.18.65 <=4.1.0.25)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1099 more potentially affected by CVE-2019-5063 via opencv-contrib-python (>=3.4.11.45 <=4.1.0.25)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...

01os (>=0.0.3 <=0.0.14), 102218077-topsis (=0.0.1) +10187 more potentially affected by CVE-2019-5063 via opencv-python (>=3.4.10.35 <=4.1.0.25)

opencv-python PYPI version =3.4.10.35, =0.0.3, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.10.0, =0.10.0, =0.11.0 - a-cv2-easy-resize =0.10.0 and more Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...

a-cv-imwrite-imread-plus (=0.12.0), aana (>=0.2.1 <=0.2.4) +3127 more potentially affected by CVE-2019-5063 via opencv-python-headless (>=3.4.3.18 <=4.1.0.25)

opencv-python-headless PYPI version =3.4.3.18, =0.2.1, =1.0.0, =0.17.3, =0.0.1.44, =0.0.1, =0.0.1, =0.2.1, =0.2.0, =0.3.0, =0.1.0, =0.1.2 and more Source cves: CVE-2019-5063 Source advisory: OSV:GHSA-M6VM-8G8V-XFJH...

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

GHSA-M6VM-8G8V-XFJH Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1095 more potentially affected by CVE-2019-19624 via opencv-contrib-python (>=3.4.11.45 <=4.13.0.92)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-19624 Source advisory: OSV:GHSA-JGGW-2Q6G-C3M6...

01os (>=0.0.3 <=0.0.14), 102218077-topsis (=0.0.1) +10176 more potentially affected by CVE-2019-19624 via opencv-python (>=3.4.10.35 <=4.13.0.92)

opencv-python PYPI version =3.4.10.35, =0.0.3, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.10.0, =0.10.0, =0.11.0 - a-cv2-easy-resize =0.10.0 and more Source cves: CVE-2019-19624 Source advisory: OSV:GHSA-JGGW-2Q6G-C3M6...

GHSA-JGGW-2Q6G-C3M6 Out-of-bounds Read in OpenCV

An out-of-bounds read was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.0.25. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +116 more potentially affected by CVE-2019-19624 via opencv-contrib-python-headless (>=3.4.18.65 <=4.13.0.92)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-19624 Source advisory: OSV:GHSA-JGGW-2Q6G-C3M6...

a-cv-imwrite-imread-plus (=0.12.0), aana (>=0.2.1 <=0.2.4) +3127 more potentially affected by CVE-2019-19624 via opencv-python-headless (>=3.4.3.18 <=4.13.0.92)

opencv-python-headless PYPI version =3.4.3.18, =0.2.1, =1.0.0, =0.17.3, =0.0.1.44, =0.0.1, =0.0.1, =0.2.1, =0.2.0, =0.3.0, =0.1.0, =0.1.2 and more Source cves: CVE-2019-19624 Source advisory: OSV:GHSA-JGGW-2Q6G-C3M6...