Out-of-bounds Read in OpenCV

An out-of-bounds read was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.0.25. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading...

a-cv-imwrite-imread-plus (=0.12.0), aana (>=0.2.1 <=0.2.4) +3127 more potentially affected by CVE-2019-9423 via opencv-python-headless (>=3.4.3.18 <=4.1.0.25)

opencv-python-headless PYPI version =3.4.3.18, =0.2.1, =1.0.0, =0.17.3, =0.0.1.44, =0.0.1, =0.0.1, =0.2.1, =0.2.0, =0.3.0, =0.1.0, =0.1.2 and more Source cves: CVE-2019-9423 Source advisory: OSV:GHSA-8849-5H85-98QW...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +117 more potentially affected by CVE-2019-9423 via opencv-contrib-python-headless (>=3.4.18.65 <=4.1.0.25)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-9423 Source advisory: OSV:GHSA-8849-5H85-98QW...

01os (>=0.0.3 <=0.0.14), 102218077-topsis (=0.0.1) +10193 more potentially affected by CVE-2019-9423 via opencv-python (>=3.4.10.35 <=4.1.1.26)

opencv-python PYPI version =3.4.10.35, =0.0.3, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.10.0, =0.10.0, =0.11.0 - a-cv2-easy-resize =0.10.0 and more Source cves: CVE-2019-9423 Source advisory: OSV:GHSA-8849-5H85-98QW...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1100 more potentially affected by CVE-2019-9423 via opencv-contrib-python (>=3.4.11.45 <=4.1.1.26)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-9423 Source advisory: OSV:GHSA-8849-5H85-98QW...

GHSA-8849-5H85-98QW Out-of-bounds Write in OpenCV

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

Out-of-bounds Write in OpenCV

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +117 more potentially affected by CVE-2019-16249 via opencv-contrib-python-headless (>=3.4.18.65 <=4.1.0.25)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-16249 Source advisory: OSV:GHSA-X3RM-644H-67M8...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1100 more potentially affected by CVE-2019-16249 via opencv-contrib-python (>=3.4.11.45 <=4.1.1.26)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-16249 Source advisory: OSV:GHSA-X3RM-644H-67M8...

01os (>=0.0.3 <=0.0.14), 102218077-topsis (=0.0.1) +10193 more potentially affected by CVE-2019-16249 via opencv-python (>=3.4.10.35 <=4.1.1.26)

opencv-python PYPI version =3.4.10.35, =0.0.3, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.10.0, =0.10.0, =0.11.0 - a-cv2-easy-resize =0.10.0 and more Source cves: CVE-2019-16249 Source advisory: OSV:GHSA-X3RM-644H-67M8...

a-cv-imwrite-imread-plus (=0.12.0), aana (>=0.2.1 <=0.2.4) +3127 more potentially affected by CVE-2019-16249 via opencv-python-headless (>=3.4.3.18 <=4.1.0.25)

opencv-python-headless PYPI version =3.4.3.18, =0.2.1, =1.0.0, =0.17.3, =0.0.1.44, =0.0.1, =0.0.1, =0.2.1, =0.2.0, =0.3.0, =0.1.0, =0.1.2 and more Source cves: CVE-2019-16249 Source advisory: OSV:GHSA-X3RM-644H-67M8...

Out-of-bounds Read in OpenCV

OpenCV 4.1.1 has an out-of-bounds read in halbaseline::vload in core/hal/intrinsse.hpp when called from computeSSDMeanNorm in modules/video/src/disflow.cpp...

GHSA-X3RM-644H-67M8 Out-of-bounds Read in OpenCV

OpenCV 4.1.1 has an out-of-bounds read in halbaseline::vload in core/hal/intrinsse.hpp when called from computeSSDMeanNorm in modules/video/src/disflow.cpp...

ailabeler (=0.5.0), aiotieba (>=2.9.0 <=2.9.1) +117 more potentially affected by CVE-2019-15939 via opencv-contrib-python-headless (>=3.4.18.65 <=4.1.0.25)

opencv-contrib-python-headless PYPI version =3.4.18.65, =2.9.0, =0.1.0, =1.2.0, =0.1.0, =0.1.11, =1.0.0, =5.4.1, =0.1.9, =0.1.1, =0.1.2, =0.19.0, =0.20.0 and more Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

GHSA-HXFW-JM98-V4MQ Divide By Zero in OpenCV.

An issue was discovered in OpenCV 4.1.0 OpenCV-Python 4.1.0.25. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1099 more potentially affected by CVE-2019-15939 via opencv-contrib-python (>=3.4.11.45 <=4.1.0.25)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

01os (>=0.0.3 <=0.0.14), 102218077-topsis (=0.0.1) +10187 more potentially affected by CVE-2019-15939 via opencv-python (>=3.4.10.35 <=4.1.0.25)

opencv-python PYPI version =3.4.10.35, =0.0.3, =0.0.1, =0.1.0, =0.0.2, =0.1.0, =0.10.0, =0.10.0, =0.11.0 - a-cv2-easy-resize =0.10.0 and more Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

a-cv-imwrite-imread-plus (=0.12.0), aana (>=0.2.1 <=0.2.4) +3127 more potentially affected by CVE-2019-15939 via opencv-python-headless (>=3.4.3.18 <=4.1.0.25)

opencv-python-headless PYPI version =3.4.3.18, =0.2.1, =1.0.0, =0.17.3, =0.0.1.44, =0.0.1, =0.0.1, =0.2.1, =0.2.0, =0.3.0, =0.1.0, =0.1.2 and more Source cves: CVE-2019-15939 Source advisory: OSV:GHSA-HXFW-JM98-V4MQ...

Divide By Zero in OpenCV.

An issue was discovered in OpenCV 4.1.0 OpenCV-Python 4.1.0.25. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp...

a-texam (=1.1.0), aait (>=1.0.4 <=1.0.5) +1099 more potentially affected by CVE-2019-14493 via opencv-contrib-python (>=3.4.11.45 <=4.1.0.25)

opencv-contrib-python PYPI version =3.4.11.45, =1.0.4, =0.0.29, =1.11.4, =0.5.0, =0.1.0, =24.3.2, =1.0.0, =0.3.0, =0.1.0, =0.1.0, =1.0.0, =1.0.3 and more Source cves: CVE-2019-14493 Source advisory: OSV:GHSA-3448-VRGH-85XR...