What is GHSA-hxfw-jm98-v4mq?

GHSA-hxfw-jm98-v4mq is a security advisory published by GitHub Security Advisories with Medium severity. Divide By Zero in OpenCV.

Which CVE IDs does GHSA-hxfw-jm98-v4mq cover?

GHSA-hxfw-jm98-v4mq covers the following CVE IDs: CVE-2019-15939. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-hxfw-jm98-v4mq?

GHSA-hxfw-jm98-v4mq has a CVSS v3 base score of 5.9, published by GitHub Security Advisories.

Which products are affected by GHSA-hxfw-jm98-v4mq?

GHSA-hxfw-jm98-v4mq affects 4 products, including: pip/opencv-python:\u003c= 4.1.0.25; pip/opencv-python-headless:\u003c= 4.1.0.25; pip/opencv-contrib-python:\u003c= 4.1.0.25; pip/opencv-contrib-python-headless:\u003c= 4.1.0.25.

GHSA-hxfw-jm98-v4mqMediumCVSS 5.9

Divide By Zero in OpenCV.

Vendor

GitHub Security Advisories

Published

October 12, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-15939 →

📋 Description

An issue was discovered in OpenCV 4.1.0 (OpenCV-Python 4.1.0.25). There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.

🎯 Affected products4

pip/opencv-python:<= 4.1.0.25
pip/opencv-python-headless:<= 4.1.0.25
pip/opencv-contrib-python:<= 4.1.0.25
pip/opencv-contrib-python-headless:<= 4.1.0.25

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2019-15939
https://github.com/OpenCV/opencv/issues/15287
https://github.com/opencv/opencv/pull/15382
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html
https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html
https://github.com/advisories/GHSA-hxfw-jm98-v4mq