GHSA-fw99-f933-rgh8HighCVSS 7.5

Out-of-bounds Read and Out-of-bounds Write in OpenCV

Published
October 12, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-14492 →

📋 Description

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 (OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26). There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

🎯 Affected products8

  • pip/opencv-python:<= 3.4.6.27
  • pip/opencv-python:>= 4.0.0.21, <= 4.1.0.25
  • pip/opencv-python-headless:<= 3.4.6.27
  • pip/opencv-python-headless:>= 4.0.0.21, <= 4.1.0.25
  • pip/opencv-contrib-python:<= 3.4.6.27
  • pip/opencv-contrib-python:>= 4.0.0.21, <= 4.1.0.25
  • pip/opencv-contrib-python-headless:<= 3.4.6.27
  • pip/opencv-contrib-python-headless:>= 4.0.0.21, <= 4.1.0.25

🔗 References (6)