GHSA-m6vm-8g8v-xfjhHighCVSS 8.8

Out-of-bounds Write in OpenCV

Published
October 12, 2021
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-5063 →

📋 Description

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 (corresponds with OpenCV-Python 4.1.0.25). A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.

🎯 Affected products4

  • pip/opencv-python:<= 4.1.0.25
  • pip/opencv-python-headless:<= 4.1.0.25
  • pip/opencv-contrib-python:<= 4.1.0.25
  • pip/opencv-contrib-python-headless:<= 4.1.0.25

🔗 References (7)