~ / search / GHSA-fw99-f933-rgh8

GHSA-fw99-f933-rgh8

Out-of-bounds Read and Out-of-bounds Write in OpenCV

Source: GitHub Advisory Database (reviewed) High CVE-2019-14492

Packages

EcosystemPackageAffectedFixed in
PyPI opencv-python < 3.4.7.28 3.4.7.28
PyPI opencv-python >= 4.0.0.21, < 4.1.1.26 4.1.1.26
PyPI opencv-python-headless < 3.4.7.28 3.4.7.28
PyPI opencv-python-headless >= 4.0.0.21, < 4.1.1.26 4.1.1.26
PyPI opencv-contrib-python < 3.4.7.28 3.4.7.28
PyPI opencv-contrib-python >= 4.0.0.21, < 4.1.1.26 4.1.1.26
PyPI opencv-contrib-python-headless < 3.4.7.28 3.4.7.28
PyPI opencv-contrib-python-headless >= 4.0.0.21, < 4.1.1.26 4.1.1.26

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 (OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26). There is an out of bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

References

External links from the advisory. They lead to third-party sites.