CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2025-53644 – GHSL-2025-057 - OpenCV contains a use after free buffer write due to an uninitialized pointer
https://notcve.org/view.php?id=CVE-2025-53644
17 Jul 2025 — OpenCV is an Open Source Computer Vision Library. Versions prior to 4.12.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability. • https://github.com/opencv/opencv/commit/a39db41390de546d18962ee1278bd6dbb715f466 • CWE-457: Use of Uninitialized Variable •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2019-19624
https://notcve.org/view.php?id=CVE-2019-19624
06 Dec 2019 — An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy. Se detectó una lectura fuera de límites en OpenCV versiones anteriores a 4.1.1. Específicamente, una variable coarsest_scale es asumida para ser mayor o igual que finest_s... • https://access.redhat.com/security/cve/cve-2019-19624 • CWE-125: Out-of-bounds Read •
CVSS: 5.9EPSS: 1%CPEs: 3EXPL: 1CVE-2019-15939
https://notcve.org/view.php?id=CVE-2019-15939
05 Sep 2019 — An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. Se detectó un problema en OpenCV versión 4.1.0. Hay un error de división por cero en cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. • http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html • CWE-369: Divide By Zero •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2019-14493 – Ubuntu Security Notice USN-7247-1
https://notcve.org/view.php?id=CVE-2019-14493
01 Aug 2019 — An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp. Se detectó un problema en OpenCV anterior a versión 4.1.1. Se presenta una desreferencia de puntero NULL en la función cv::XMLParser::parse en el archivo modules/core/src/persistence.cpp. It was discovered that OpenCV did not properly manage certain XML data, leading to a NULL pointer dereference. • https://github.com/opencv/opencv/compare/371bba8...ddbd10c • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1CVE-2019-14492
https://notcve.org/view.php?id=CVE-2019-14492
01 Aug 2019 — An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service. Se detectó un problema en OpenCV anterior a versión 3.4.7 y versiones 4.x anteriores a 4.1.1. Se presenta una lectura y escritura fuera de límites en la función HaarEvaluator::OptFeature::calc en el archivo modules/objdetect/src/cascadedetect.hpp, lo que conlleva a la denegación ... • http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html • CWE-125: Out-of-bounds Read CWE-787: Out-of-bounds Write •
CVSS: 8.2EPSS: 0%CPEs: 2EXPL: 1CVE-2019-14491
https://notcve.org/view.php?id=CVE-2019-14491
01 Aug 2019 — An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 1CVE-2018-5268
https://notcve.org/view.php?id=CVE-2018-5268
08 Jan 2018 — In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file. En OpenCV 3.3.1, ocurre un desbordamiento de búfer basado en memoria dinámica (heap) en cv::Jpeg2KDecoder::readComponent8u en modules/imgcodecs/src/grfmt_jpeg2000.cpp al analizar un archivo de imagen manipulado. • http://www.securityfocus.com/bid/106945 • CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 1CVE-2018-5269
https://notcve.org/view.php?id=CVE-2018-5269
08 Jan 2018 — In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast. En OpenCV 3.3.1, ocurre un fallo de aserción en cv::RBaseStream::setPos en modules/imgcodecs/src/bitstrm.cpp debido a un pase de enteros incorrecto. • http://www.securityfocus.com/bid/106945 • CWE-617: Reachable Assertion •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2017-18009
https://notcve.org/view.php?id=CVE-2017-18009
01 Jan 2018 — In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp. En OpenCV 3.3.1, una sobrelectura de búfer basada en memoria dinámica (heap) existe en la función cv::HdrDecoder::checkSignature en modules/imgcodecs/src/grfmt_hdr.cpp. • http://www.securityfocus.com/bid/106945 • CWE-125: Out-of-bounds Read •
CVSS: 6.5EPSS: 1%CPEs: 4EXPL: 0CVE-2017-17760
https://notcve.org/view.php?id=CVE-2017-17760
29 Dec 2017 — OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used. OpenCV 3.3.1 tiene un desbordamiento de búfer en la función cv::PxMDecoder::readData en grfmt_pxm.cpp, debido a que se emplea un valor de tamaño incorrecto. • http://www.securityfocus.com/bid/102974 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •