GHSA-hxfw-jm98-v4mq
Divide By Zero in OpenCV.
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | opencv-python | < 4.1.1.26 | 4.1.1.26 |
| PyPI | opencv-python-headless | < 4.1.1.26 | 4.1.1.26 |
| PyPI | opencv-contrib-python | < 4.1.1.26 | 4.1.1.26 |
| PyPI | opencv-contrib-python-headless | < 4.1.1.26 | 4.1.1.26 |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in OpenCV 4.1.0 (OpenCV-Python 4.1.0.25). There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2019-15939
- https://github.com/OpenCV/opencv/issues/15287
- https://github.com/opencv/opencv/pull/15382
- https://github.com/opencv/opencv-python
- https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html