CVE-2025-53644

OpenCV contains a use after free buffer write due to an uninitialized pointer

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.

CVSS 4.0 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Opencv

Products

Opencv

CVE-2016-1517

opencv: Remote DoS via vectors involving corrupt chunks

OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.

CVSS 3.0 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Opencv

Products

Opencv

CVE-2017-12597

opencv: out-of-bounds write error in the function FillColorRow1

OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12598

opencv: out-of-bounds read error in the cv::RBaseStream::readBlock function

OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12599

opencv: out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R

OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by using cv::imread.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12600

opencv: CPU exhaustion causing DoS

OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed

Vendors

Opencv

Products

Opencv

CVE-2017-12601

opencv: buffer overflow in the cv::BmpDecoder::readData function

OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp when reading an image file by using cv::imread, as demonstrated by the 4-buf-overflow-readData-memcpy test case.

CVSS 3.1 · 8.8 High EPSS 2.1% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12602

opencv: Memory exhaustion causing DoS

OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case.

CVSS 3.0 · 7.5 High EPSS 3.0% KEV · Not listed

Vendors

Opencv

Products

Opencv

CVE-2017-12603

opencv: invalid write in the cv::RLByteStream::getBytes function

OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 2-opencv-heapoverflow-fseek test case.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12604

opencv: out-of-bounds write error in the function FillUniColor

OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12605

opencv: out-of-bounds write error in the function FillColorRow8

OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12606

opencv: out-of-bounds write error in the function FillColorRow4

OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file by using cv::imread.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12862

opencv: Heap-based buffer over-write in modules/imgcodecs/src/grfmt_pxm.cpp

In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.

CVSS 3.1 · 8.8 High EPSS 3.1% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12863

opencv: Integer overflow in PxMDecoder::readData function in imgcodecs/src/grfmt_pxm.cpp

In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-12864

opencv: Integer overflow in ReadNumber function in opencv/modules/imgcodecs/src/grfmt_pxm.cpp

In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.

CVSS 3.1 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-14136

opencv: out-of-bounds write error in the function FillColorRow1

OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.

CVSS 3.0 · 6.5 Medium EPSS 1.6% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2016-1516

opencv: Double free vulnerability on crafted image

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2017-17760

opencv: Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp

OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.

CVSS 3.1 · 6.5 Medium EPSS 2.2% KEV · Not listed

Vendors

Debian Opencv

Products

Debian Linux Opencv

CVE-2023-2617

OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeByteSegment null pointer dereference

A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-228547.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed

Vendors

Opencv

Products

Opencv

CVE-2023-2618

OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeHanziSegment memory leak

A vulnerability, which was classified as problematic, has been found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this issue is the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to memory leak. The attack may be launched remotely. The name of the patch is 2b62ff6181163eea029ed1cab11363b4996e9cd6. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-228548.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed

Vendors

Opencv

Products

Opencv