Lookup for vulnerable packages by Package URL.
| Purl | pkg:pypi/opencv-contrib-python-headless@4.1.0.25 |
|---|
| Type | pypi |
|---|
| Namespace | |
|---|
| Name | opencv-contrib-python-headless |
|---|
| Version | 4.1.0.25 |
|---|
| Qualifiers |
|
|---|
| Subpath | |
|---|
| Is_vulnerable | true |
|---|
| Next_non_vulnerable_version | 4.8.1.78 |
|---|
| Latest_non_vulnerable_version | 4.8.1.78 |
|---|
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-1qhy-7pnz-aqga |
| vulnerability_id |
VCID-1qhy-7pnz-aqga |
| summary |
Out-of-bounds Write
An issue was discovered in OpenCV There is an out-of-bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2019-14492, GHSA-fw99-f933-rgh8
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1qhy-7pnz-aqga |
|
| 1 |
| url |
VCID-21n5-7ukh-gyfr |
| vulnerability_id |
VCID-21n5-7ukh-gyfr |
| summary |
NULL Pointer Dereference
An issue was discovered in OpenCV There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2019-14493, GHSA-3448-vrgh-85xr
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-21n5-7ukh-gyfr |
|
| 2 |
| url |
VCID-25vm-cytf-bqb1 |
| vulnerability_id |
VCID-25vm-cytf-bqb1 |
| summary |
Out-of-bounds Write
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-5063, GHSA-m6vm-8g8v-xfjh
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-25vm-cytf-bqb1 |
|
| 3 |
|
| 4 |
| url |
VCID-dv7w-p358-1qda |
| vulnerability_id |
VCID-dv7w-p358-1qda |
| summary |
Out-of-bounds Read
An issue was discovered in OpenCV There is an out-of-bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service. |
| references |
| 0 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-14491, GHSA-fm39-cw8h-3p63
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dv7w-p358-1qda |
|
| 5 |
| url |
VCID-qn1c-mtud-5kbq |
| vulnerability_id |
VCID-qn1c-mtud-5kbq |
| summary |
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2. |
| references |
|
| fixed_packages |
|
| aliases |
PYSEC-2023-182
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qn1c-mtud-5kbq |
|
|
|---|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-fjy7-r2wm-n3b4 |
| vulnerability_id |
VCID-fjy7-r2wm-n3b4 |
| summary |
Out-of-bounds Read
An out-of-bounds read was discovered in OpenCV Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2019-19624, GHSA-jggw-2q6g-c3m6
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fjy7-r2wm-n3b4 |
|
|
|---|
| Risk_score | 4.0 |
|---|
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:pypi/opencv-contrib-python-headless@4.1.0.25 |
|---|