Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 35

Export CSV
CVE-2019-5064

opencv: Heap buffer overflow in persistence_json.cpp while parsing crafted JSON file

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 10.7% KEV · Not listed
Vendors
Opencv Oracle
Products
Opencv Application Testing Suite Big Data Spatial And Graph and 1 more
CVE-2019-5063

opencv: Heap buffer overflow in persistence_xml.cpp while parsing crafted XML file

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.

CVSS 3.1 · 8.8 High EPSS 21.1% KEV · Not listed
Vendors
Opencv Oracle
Products
Opencv Application Testing Suite Big Data Spatial And Graph and 1 more
CVE-2019-19624

opencv: out-of-bounds read in DIS optflow algorithm when dealing with small images

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.

CVSS 3.1 · 6.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Opencv Redhat
Products
Opencv Enterprise Linux
CVE-2019-16249

opencv: Out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp

OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp.

CVSS 3.1 · 5.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Opencv
Products
Opencv
CVE-2019-15939

opencv: division by zero in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp

An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.

CVSS 3.1 · 5.9 Medium EPSS 2.5% KEV · Not listed
Vendors
Debian Opencv Opensuse
Products
Debian Linux Opencv Leap
CVE-2019-14493

opencv: NULL pointer dereference in function cv::XMLParser::parse() in persistence_xml.cpp leading to DoS

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

CVSS 3.1 · 7.5 High EPSS 3.3% KEV · Not listed
Vendors
Debian Opencv
Products
Debian Linux Opencv
CVE-2019-14492

opencv: out-of-bounds read in function HaarEvaluator::OptFeature::calc() in cascadedetect.hpp leading to DoS

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

CVSS 3.1 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Opencv Opensuse
Products
Opencv Leap
CVE-2019-14491

opencv: out-of-bounds read in function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp leads to dos

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

CVSS 3.0 · 8.2 High EPSS 2.9% KEV · Not listed
Vendors
Opencv
Products
Opencv
CVE-2018-7714

opencv: assertion failure in validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (pixels <= (1<<30)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.

CVSS 3.0 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Opencv
Products
Opencv
CVE-2018-7713

opencv: assertion failure in validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.width <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.

CVSS 3.0 · 7.5 High EPSS 2.3% KEV · Not listed
Vendors
Opencv
Products
Opencv
CVE-2018-7712

opencv: assertion failure in validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp

The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failure) because (size.height <= (1<<20)) may be false. Note: “OpenCV CV_Assert is not an assertion (C-like assert()), it is regular C++ exception which can raised in case of invalid or non-supported parameters.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Opencv
Products
Opencv
CVE-2018-5269

opencv: Assertion failure due to incorrect integer cast

In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast.

CVSS 3.1 · 5.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Debian Opencv
Products
Debian Linux Opencv
CVE-2018-5268

opencv: Heap-based buffer overflow in cv::Jpeg2KDecoder::readComponent8u

In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file.

CVSS 3.1 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Debian Opencv
Products
Debian Linux Opencv
CVE-2017-18009

opencv: heap-based buffer over-read in function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp

In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Opencv
Products
Opencv
CVE-2017-1000450

opencv: out of bounds write in functions FillUniColor and FillUniGray in opencv/modules/imgcodecs/src/utils.cpp

In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier.

CVSS 3.1 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Debian Opencv
Products
Debian Linux Opencv