What is GHSA-x3rm-644h-67m8?

GHSA-x3rm-644h-67m8 is a security advisory published by GitHub Security Advisories with Medium severity. Out-of-bounds Read in OpenCV

Which CVE IDs does GHSA-x3rm-644h-67m8 cover?

GHSA-x3rm-644h-67m8 covers the following CVE IDs: CVE-2019-16249. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-x3rm-644h-67m8?

GHSA-x3rm-644h-67m8 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-x3rm-644h-67m8?

GHSA-x3rm-644h-67m8 affects 4 products, including: pip/opencv-python:\u003c= 4.1.1.26; pip/opencv-python-headless:\u003c= 4.1.1.26; pip/opencv-contrib-python:\u003c= 4.1.1.26; pip/opencv-contrib-python-headless:\u003c= 4.1.1.26.

GHSA-x3rm-644h-67m8MediumCVSS 5.3

Out-of-bounds Read in OpenCV

Vendor

GitHub Security Advisories

Published

October 12, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2019-16249 →

📋 Description

OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp.

🎯 Affected products4

pip/opencv-python:<= 4.1.1.26
pip/opencv-python-headless:<= 4.1.1.26
pip/opencv-contrib-python:<= 4.1.1.26
pip/opencv-contrib-python-headless:<= 4.1.1.26

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2019-16249
https://github.com/opencv/opencv/issues/15481
https://github.com/opencv/opencv/pull/15531
https://bugzilla.redhat.com/show_bug.cgi?id=1752702
https://github.com/opencv/opencv-python/releases/tag/30
https://github.com/advisories/GHSA-x3rm-644h-67m8