823 matches found
CVE-2019-14493
OpenCV vulnerability CVE-2019-14493 affects OpenCV prior to 4.1.1, due to a NULL pointer dereference in cv::XMLParser::parse (modules/core/src/persistence.cpp). The issue can lead to crashes (denial of service) as indicated by multiple advisories. Public details include references from Debian, Ub...
CVE-2019-14493
An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...
CVE-2019-14493
An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...
CVE-2019-14492
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...
CVE-2019-14492
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...
CVE-2019-14492
CVE-2019-14492 affects OpenCV before 3.4.7 and 4.x before 4.1.1, caused by an out-of-bounds read/write in HaarEvaluator::OptFeature::calc (cascadedetect.hpp), leading to denial of service. Public references in multiple advisories (SUSE/SLED/SLES updates, Ubuntu USN-4818-1, Red Hat/Nessus entries)...
CVE-2019-14491
OpenCV prior to 3.4.7 and 4.x prior to 4.1.1 contains an out-of-bounds read in cv::predictOrderedcv::HaarEvaluator within modules/objdetect/src/cascadedetect.hpp, which can lead to denial of service. The vulnerability affects OpenCV’s Haar feature evaluation path used in object detection; multipl...
CVE-2019-14491
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...
CVE-2019-14491
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...
PT-2019-6436
Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 3.4.7 OpenCV versions 4.x prior to 4.1.1 Description The issue is related to an out of bounds read in the cv::predictOrdered function in modules/objdetect/src/cascadedetect.hpp. This can lead to denial of service and...
PT-2019-6434
Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.1.1 Description An issue was discovered in the function cv::XMLParser::parse at modules/core/src/persistence.cpp, which is related to errors in pointer dereferencing. This issue can be exploited by a remote attacker ...
opencv/imread_fuzzer: Use-of-uninitialized-value in cv::ExrDecoder::readData
Detailed report: https://oss-fuzz.com/testcase?key=5744080958521344 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cv::ExrDecoder::readData...
GHSA-F698-M2V9-5FH3 Command Injection in opencv
Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. Recommendation Upgrade to version 6.1.0...
Command Injection in opencv
Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. Recommendation Upgrade to version 6.1.0...
PT-2019-6432
Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.1.1 OpenCV-Python versions prior to 4.1.0.25 Description An out-of-bounds read issue was discovered in the calc and ocl calc functions within the dis flow.cpp component of OpenCV. This occurs because the coarsest sca...
opencv/imread_fuzzer: Crash in _TIFFmemset
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5760646009847808 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe0ecdf77d0 Crash...
opencv/imread_fuzzer: Crash in TIFFReadRGBATileExt
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5729601348698112 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f97d1e3e903 Crash...
opencv/imdecode_fuzzer: Incorrect-function-pointer-type in cv::Mat::convertTo
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5643625308880896 Project: opencv Fuzzer: libFuzzerimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash...
opencv/imdecode_fuzzer: Crash in DumpModeDecode
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5693078825861120 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...
