CVE-2019-14493

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

CVE-2019-14492

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14492

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14492

CVE-2019-14492 affects OpenCV before 3.4.7 and 4.x before 4.1.1, caused by an out-of-bounds read/write in HaarEvaluator::OptFeature::calc (cascadedetect.hpp), leading to denial of service. Public references in multiple advisories (SUSE/SLED/SLES updates, Ubuntu USN-4818-1, Red Hat/Nessus entries)...

CVE-2019-14491

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14491

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service...

CVE-2019-14491

OpenCV prior to 3.4.7 and 4.x prior to 4.1.1 contains an out-of-bounds read in cv::predictOrderedcv::HaarEvaluator within modules/objdetect/src/cascadedetect.hpp, which can lead to denial of service. The vulnerability affects OpenCV’s Haar feature evaluation path used in object detection; multipl...

PT-2019-6434

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.1.1 Description An issue was discovered in the function cv::XMLParser::parse at modules/core/src/persistence.cpp, which is related to errors in pointer dereferencing. This issue can be exploited by a remote attacker ...

opencv/imread_fuzzer: Use-of-uninitialized-value in cv::ExrDecoder::readData

Detailed report: https://oss-fuzz.com/testcase?key=5744080958521344 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cv::ExrDecoder::readData...

abe-cli (>=2.11.3 <=2.14.2), abeadfab (>=2.16.15 <=3.7.20) +25 more potentially affected by unknown CVE via opencv (>=0.0.12 <=5.0.0)

opencv NPM version =0.0.12, =2.11.3, =2.16.15, =1.0.0, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =0.0.2, =1.1.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-F698-M2V9-5FH3...

GHSA-F698-M2V9-5FH3 Command Injection in opencv

Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. Recommendation Upgrade to version 6.1.0...

Command Injection in opencv

Versions of opencvprior to 6.1.0 are vulnerable to Command Injection. The utils/ script find-opencv.js does not validate user input allowing attackers to execute arbitrary commands. Recommendation Upgrade to version 6.1.0...

PT-2019-6432

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.1.1 OpenCV-Python versions prior to 4.1.0.25 Description An out-of-bounds read issue was discovered in the calc and ocl calc functions within the dis flow.cpp component of OpenCV. This occurs because the coarsest sca...

opencv/imread_fuzzer: Crash in _TIFFmemset

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5760646009847808 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fe0ecdf77d0 Crash...

opencv/imread_fuzzer: Crash in TIFFReadRGBATileExt

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5729601348698112 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f97d1e3e903 Crash...

opencv/imdecode_fuzzer: Incorrect-function-pointer-type in cv::Mat::convertTo

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5643625308880896 Project: opencv Fuzzer: libFuzzerimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: Incorrect-function-pointer-type Crash...

opencv/imdecode_fuzzer: Crash in DumpModeDecode

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5693078825861120 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerubsanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

CVE-2017-18009

In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmthdr.cpp...

opencv/imdecode_fuzzer: Heap-buffer-overflow in Luv32toXYZ

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5638950225444864 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cras...

opencv/imdecode_fuzzer: Heap-buffer-overflow in LogLuv24toXYZ

Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5637208565874688 Project: opencv Fuzzer: libFuzzeropencvimdecodefuzzer Fuzz target binary: imdecodefuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Cras...