Vulnerabilities (CVE)

Filtered by vendor Opencv Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-17760 2 Debian, Opencv 2 Debian Linux, Opencv 2021-12-16 4.3 MEDIUM 6.5 MEDIUM
OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.
CVE-2019-15939 3 Debian, Opencv, Opensuse 3 Debian Linux, Opencv, Leap 2021-11-30 4.3 MEDIUM 5.9 MEDIUM
An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.
CVE-2018-5269 2 Debian, Opencv 2 Debian Linux, Opencv 2021-11-30 4.3 MEDIUM 5.5 MEDIUM
In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast.
CVE-2018-5268 2 Debian, Opencv 2 Debian Linux, Opencv 2021-11-30 4.3 MEDIUM 5.5 MEDIUM
In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file.
CVE-2019-19624 2 Opencv, Redhat 2 Opencv, Enterprise Linux 2019-12-17 6.4 MEDIUM 6.5 MEDIUM
An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.
CVE-2019-16249 1 Opencv 1 Opencv 2019-12-03 5.0 MEDIUM 5.3 MEDIUM
OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp.
CVE-2017-14136 2 Debian, Opencv 2 Debian Linux, Opencv 2019-03-20 4.3 MEDIUM 6.5 MEDIUM
OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.
CVE-2016-1517 1 Opencv 1 Opencv 2017-04-14 4.3 MEDIUM 5.5 MEDIUM
OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.