GHSA-fm39-cw8h-3p63HighCVSS 8.2

Out-of-bounds Read in OpenCV

Published
October 12, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-14491 →

📋 Description

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 (OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26). There is an out of bounds read in the function cv::predictOrderedcv::HaarEvaluator in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

🎯 Affected products8

  • pip/opencv-python:<= 3.4.6.27
  • pip/opencv-python:>= 4.0.0.21, <= 4.1.0.25
  • pip/opencv-python-headless:<= 3.4.6.27
  • pip/opencv-python-headless:>= 4.0.0.21, <= 4.1.0.25
  • pip/opencv-contrib-python:<= 3.4.6.27
  • pip/opencv-contrib-python:>= 4.0.0.21, <= 4.1.0.25
  • pip/opencv-contrib-python-headless:<= 3.4.6.27
  • pip/opencv-contrib-python-headless:>= 4.0.0.21, <= 4.1.0.25

🔗 References (6)