CVE-2019-5063High· 8.8▾ TwilightOut-of-bounds Write in OpenCV
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 4.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
21%
21% → 21%
Last analysed / modified upstream
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 (corresponds with OpenCV-Python 4.1.0.25). A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
opencv-python <= 4.1.0.25opencv-python-headless <= 4.1.0.25opencv-contrib-python <= 4.1.0.25opencv-contrib-python-headless <= 4.1.0.25Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
CVE-2019-5064High· 8.8Out-of-bounds Write in OpenCV
CVE-2019-19624Medium· 6.5Out-of-bounds Read in OpenCV
GHSA-qr4w-53vh-m672High· 8.8opencv-python bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
CVE-2019-16249Medium· 5.3Out-of-bounds Read in OpenCV
CVE-2017-12863High· 8.8Integer Overflow or Wraparound in OpenCV
CVE-2017-12601High· 8.8Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV