Lookup for vulnerable packages by Package URL.
| Purl | pkg:pypi/opencv-contrib-python-headless@4.1.1.26 |
|---|
| Type | pypi |
|---|
| Namespace | |
|---|
| Name | opencv-contrib-python-headless |
|---|
| Version | 4.1.1.26 |
|---|
| Qualifiers |
|
|---|
| Subpath | |
|---|
| Is_vulnerable | true |
|---|
| Next_non_vulnerable_version | 4.8.1.78 |
|---|
| Latest_non_vulnerable_version | 4.8.1.78 |
|---|
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-h7gk-61kp-8ygz |
| vulnerability_id |
VCID-h7gk-61kp-8ygz |
| summary |
Out-of-bounds Read
OpenCV has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2019-16249, GHSA-x3rm-644h-67m8
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h7gk-61kp-8ygz |
|
| 1 |
| url |
VCID-kxqz-tbvz-gfcs |
| vulnerability_id |
VCID-kxqz-tbvz-gfcs |
| summary |
Out-of-bounds Write
In opencv calls that use libpng, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616 |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2019-9423, GHSA-8849-5h85-98qw
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-kxqz-tbvz-gfcs |
|
| 2 |
| url |
VCID-qn1c-mtud-5kbq |
| vulnerability_id |
VCID-qn1c-mtud-5kbq |
| summary |
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2. |
| references |
|
| fixed_packages |
|
| aliases |
PYSEC-2023-182
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qn1c-mtud-5kbq |
|
|
|---|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-1qhy-7pnz-aqga |
| vulnerability_id |
VCID-1qhy-7pnz-aqga |
| summary |
Out-of-bounds Write
An issue was discovered in OpenCV There is an out-of-bounds read/write in the function HaarEvaluator::OptFeature::calc in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2019-14492, GHSA-fw99-f933-rgh8
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1qhy-7pnz-aqga |
|
| 1 |
| url |
VCID-21n5-7ukh-gyfr |
| vulnerability_id |
VCID-21n5-7ukh-gyfr |
| summary |
NULL Pointer Dereference
An issue was discovered in OpenCV There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2019-14493, GHSA-3448-vrgh-85xr
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-21n5-7ukh-gyfr |
|
| 2 |
|
| 3 |
| url |
VCID-dv7w-p358-1qda |
| vulnerability_id |
VCID-dv7w-p358-1qda |
| summary |
Out-of-bounds Read
An issue was discovered in OpenCV There is an out-of-bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2019-14491, GHSA-fm39-cw8h-3p63
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dv7w-p358-1qda |
|
|
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:pypi/opencv-contrib-python-headless@4.1.1.26 |
|---|