Opencv vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2019-5064 An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0.High 8.8 · Jan 3, 2020
• CVE-2019-5063 An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0.High 8.8 · Jan 3, 2020
• CVE-2019-14493 An issue was discovered in OpenCV before 4.1.1.High 7.5 · Aug 1, 2019
• CVE-2019-14492 An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1.High 7.5 · Aug 1, 2019
• CVE-2019-14491 An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1.High 8.2 · Aug 1, 2019
• CVE-2018-7714 The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failurHigh 7.5 · Mar 5, 2018
• CVE-2018-7713 The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failurHigh 7.5 · Mar 5, 2018
• CVE-2018-7712 The validateInputImageSize function in modules/imgcodecs/src/loadsave.cpp in OpenCV 3.4.1 allows remote attackers to cause a denial of service (assertion failurHigh 7.5 · Mar 5, 2018
• CVE-2017-1000450 In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow.High 8.8 · Jan 2, 2018
• CVE-2017-18009 In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp.High 7.5 · Jan 1, 2018
• CVE-2017-12864 In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow.High 8.8 · Aug 15, 2017
• CVE-2017-12863 In opencv/modules/imgcodecs/src/grfmt_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src_pitch.High 8.8 · Aug 15, 2017
• CVE-2017-12862 In modules/imgcodecs/src/grfmt_pxm.cpp, the length of buffer AutoBuffer _src is small than expected, which will cause copy buffer overflow later.High 8.8 · Aug 15, 2017
• CVE-2017-12606 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when reading an image file High 8.8 · Aug 6, 2017
• CVE-2017-12605 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file High 8.8 · Aug 6, 2017
• CVE-2017-12604 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file bHigh 8.8 · Aug 6, 2017
• CVE-2017-12603 OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp whHigh 8.8 · Aug 6, 2017
• CVE-2017-12602 OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaustHigh 7.5 · Aug 6, 2017
• CVE-2017-12601 OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs/src/grfmt_bmp.cpp wHigh 8.8 · Aug 6, 2017
• CVE-2017-12600 OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test High 7.5 · Aug 6, 2017
• CVE-2017-12599 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt_BGRA2BGR_8u_C4C3R when reading an image file by High 8.8 · Aug 6, 2017
• CVE-2017-12598 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitHigh 8.8 · Aug 6, 2017
• CVE-2017-12597 OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file High 8.8 · Aug 6, 2017
• CVE-2016-1516 OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code.High 8.8 · Apr 9, 2017