CVE-2019-19624Medium· 6.5▾ SunlitOut-of-bounds Read in OpenCV
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
1.7%
1.7% → 1.8%
Last analysed / modified upstream
An out-of-bounds read was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.0.25). Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.
opencv-python < 4.1.0.25opencv-python-headless < 4.1.0.25opencv-contrib-python < 4.1.0.25opencv-contrib-python-headless < 4.1.0.25Upgrade to a patched release:
opencv-python 4.1.0.25opencv-python-headless 4.1.0.25opencv-contrib-python 4.1.0.25opencv-contrib-python-headless 4.1.0.25Connected by shared product, vendor, weakness, or advisory.
CVE-2019-5063High· 8.8Out-of-bounds Write in OpenCV
GHSA-qr4w-53vh-m672High· 8.8opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
CVE-2019-16249Medium· 5.3Out-of-bounds Read in OpenCV
CVE-2017-12863High· 8.8Integer Overflow or Wraparound in OpenCV
CVE-2017-12601High· 8.8Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
CVE-2017-12606High· 8.8Out-of-bounds Write in OpenCV