CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2019-19624
https://notcve.org/view.php?id=CVE-2019-19624
06 Dec 2019 — An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy. Se detectó una lectura fuera de límites en OpenCV versiones anteriores a 4.1.1. Específicamente, una variable coarsest_scale es asumida para ser mayor o igual que finest_s... • https://access.redhat.com/security/cve/cve-2019-19624 • CWE-125: Out-of-bounds Read •
CVSS: 5.9EPSS: 1%CPEs: 3EXPL: 1CVE-2019-15939
https://notcve.org/view.php?id=CVE-2019-15939
05 Sep 2019 — An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. Se detectó un problema en OpenCV versión 4.1.0. Hay un error de división por cero en cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. • http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html • CWE-369: Divide By Zero •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2019-14493 – Ubuntu Security Notice USN-7247-1
https://notcve.org/view.php?id=CVE-2019-14493
01 Aug 2019 — An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp. Se detectó un problema en OpenCV anterior a versión 4.1.1. Se presenta una desreferencia de puntero NULL en la función cv::XMLParser::parse en el archivo modules/core/src/persistence.cpp. It was discovered that OpenCV did not properly manage certain XML data, leading to a NULL pointer dereference. • https://github.com/opencv/opencv/compare/371bba8...ddbd10c • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1CVE-2019-14492
https://notcve.org/view.php?id=CVE-2019-14492
01 Aug 2019 — An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service. Se detectó un problema en OpenCV anterior a versión 3.4.7 y versiones 4.x anteriores a 4.1.1. Se presenta una lectura y escritura fuera de límites en la función HaarEvaluator::OptFeature::calc en el archivo modules/objdetect/src/cascadedetect.hpp, lo que conlleva a la denegación ... • http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html • CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •
CVSS: 8.2EPSS: 0%CPEs: 2EXPL: 1CVE-2019-14491
https://notcve.org/view.php?id=CVE-2019-14491
01 Aug 2019 — An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2016-10658
https://notcve.org/view.php?id=CVE-2016-10658
29 May 2018 — native-opencv is the OpenCV library installed via npm native-opencv downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker controlled copy if the attacker is on the network or positioned in between the user and the remote server. native-opencv es la biblioteca de OpenCV instalada mediante npm. native-opencv descarga recursos binarios por HTTP, lo que lo deja vulnerable ... • https://nodesecurity.io/advisories/263 • CWE-310: Cryptographic Issues CWE-311: Missing Encryption of Sensitive Data •
CVSS: 8.8EPSS: 1%CPEs: 4EXPL: 2CVE-2017-1000450
https://notcve.org/view.php?id=CVE-2017-1000450
02 Jan 2018 — In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier. En opencv/modules/imgcodecs/src/utils.cpp, las funciones FillUniColor y FillUniGray no comprueban la longitud de la entrada, lo que puede conducir a un desbordamiento de enteros. Si la imagen proviene de una fuente remota, podría provocar la... • https://github.com/blendin/pocs/blob/master/opencv/0.OOB_Write_FillUniColor • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 1%CPEs: 3EXPL: 0CVE-2017-12864 – Gentoo Linux Security Advisory 201712-02
https://notcve.org/view.php?id=CVE-2017-12864
15 Aug 2017 — In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier. En opencv/modules/imgcodecs/src/grfmt_pxm.cpp, la función ReadNumber no comprueba el tamaño de la entrada, lo que conduce a un desbordamiento de enteros. Si la imagen proviene de una fuente remota, podría provocar la ejecución remota de código o una denega... • https://github.com/opencv/opencv/issues/9372 • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 1%CPEs: 3EXPL: 0CVE-2017-12862 – Gentoo Linux Security Advisory 201712-02
https://notcve.org/view.php?id=CVE-2017-12862
15 Aug 2017 — In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier. En modules/imgcodecs/src/grfmt_pxm.cpp, el tamaño del búfer AutoBuffer _src es más pequeño de lo esperado, lo que causará un desbordamiento de búfer de copia posteriormente. Si la imagen proviene de una fuente remota, podría provocar la ejecuci... • https://github.com/opencv/opencv/issues/9370 • CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0CVE-2017-12863 – Gentoo Linux Security Advisory 201712-02
https://notcve.org/view.php?id=CVE-2017-12863
15 Aug 2017 — In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier. En opencv/modules/imgcodecs/src/grfmt_pxm.cpp, la función PxMDecoder::readData tiene un desbordamiento de enteros cuando calcula src_pitch. Si la imagen proviene de una fuente remota, podría provocar la ejecución remota de código o una denegación de servicio. • https://github.com/opencv/opencv/issues/9371 • CWE-190: Integer Overflow or Wraparound •