858 matches found
opencv/imread_fuzzer: Use-of-uninitialized-value in inflate
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5633341317971968 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...
opencv/imread_fuzzer: Crash in putgreytile
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5149889707638784 Project: opencv Fuzzer: aflopencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: aflasanopencv Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fb914a7fb38 Crash...
opencv/imread_fuzzer: Use-of-uninitialized-value in cv::PAMDecoder::readHeader
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5128776439037952 Project: opencv Fuzzer: libFuzzerimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzermsanopencv Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...
opencv/imread_fuzzer: Heap-buffer-overflow in gtTileSeparate
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5098633869918208 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...
opencv/imread_fuzzer: Crash in TIFFReadRGBATileExt
Project: https://github.com/opencv/opencv.git Detailed report: https://oss-fuzz.com/testcase?key=5069655658463232 Project: opencv Fuzzer: libFuzzeropencvimreadfuzzer Fuzz target binary: imreadfuzzer Job Type: libfuzzerasanopencv Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x7f61333cf000...
GHSA-MPWW-J7XJ-CJ35 Downloads Resources over HTTP in native-opencv
Affected versions of native-opencv insecurely download an executable over an unencrypted HTTP connection. In scenarios where an attacker has a privileged network position, it is possible to intercept the response and replace the executable with a malicious one, resulting in code execution on the...
openSUSE: Security Advisory for opencv (openSUSE-SU-2018:1697-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
node-opencv is malware
The node-opencv package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security...
@ekyc_qoobiss/qbs-ect-cmp (>=4.7.16 <=4.7.140), @ekycsolutions/ml-js-sdk (>=0.0.9-alpha <=0.0.10-alpha.13) +13 more potentially affected by CVE-2017-16066 via opencv.js (=1.2.1)
opencv.js NPM version =1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on opencv.js and may be impacted: - @ekycqoobiss/qbs-ect-cmp =4.7.16, =0.0.9-alpha, =1.1.2, =0.3.1, =1.0.0, =0.7.1, =4.0.0, =2.0.1, =2.0.0, =1.11.0, =0.0.112, =0.1.7 Source cves:...
Debian DLA-1438-1 : opencv security update
Early versions of opencv have problems while reading data, which might result in either buffer overflows, out-of bounds errors or integer overflows. Further assertion errors might happen due to incorrect integer cast. For Debian 8 'Jessie', these problems have been fixed in version...
[SECURITY] [DLA 1438-1] opencv security update
Package : opencv Version : 2.4.9.1+dfsg-1+deb8u2 CVE ID : CVE-2016-1516 CVE-2017-12597 CVE-2017-12598 CVE-2017-12599 CVE-2017-12601 CVE-2017-12603 CVE-2017-12604 CVE-2017-12605 CVE-2017-12606 CVE-2017-12862 CVE-2017-12863 CVE-2017-12864 CVE-2017-14136 CVE-2017-17760 CVE-2017-1000450 CVE-2018-5268...
DLA-1438-1 opencv - security update
Bulletin has no description...
Debian: Security Advisory (DLA-1438-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for opencv (moderate)
This update for opencv fixes this security issue: - CVE-2017-18009: Prevent heap-based buffer over-read in the function cv::HdrDecoder::checkSignature bsc1074312...
openSUSE Security Update : opencv (openSUSE-2018-629)
This update for opencv fixes this security issue : - CVE-2017-18009: Prevent heap-based buffer over-read in the function cv::HdrDecoder::checkSignature bsc1074312. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
node-opencv design vulnerability
node-opencv is a JavaScript library for connecting to OpenCV. A security vulnerability exists in node-opencv. An attacker can exploit the vulnerability to steal environment variables...
Malicious JavaScript Package Detection
Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Malicious Typo-Squatting
node-opencv is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake it for the real one but have malicious actions under the hood such as stealing environment variables...
