CVE-2019-14493High· 7.5▾ TwilightNULL Pointer Dereference in OpenCV.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.7 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
3.4%
3.4% → 3.4%
Last analysed / modified upstream
An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.
opencv-python < 4.1.1.26opencv-python-headless < 4.1.1.26opencv-contrib-python < 4.1.1.26opencv-contrib-python-headless < 4.1.1.26Upgrade to a patched release:
opencv-python 4.1.1.26opencv-python-headless 4.1.1.26opencv-contrib-python 4.1.1.26opencv-contrib-python-headless 4.1.1.26Connected by shared product, vendor, weakness, or advisory.
CVE-2017-12863High· 8.8Integer Overflow or Wraparound in OpenCV
CVE-2017-12601High· 8.8Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
CVE-2017-12606High· 8.8Out-of-bounds Write in OpenCV
CVE-2017-12605High· 8.8Out-of-bounds Write in OpenCV
CVE-2017-1000450High· 8.8Integer Overflow or Wraparound in OpenCV.
CVE-2017-17760Medium· 6.5Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV