Out-of-Bounds Read Vulnerability in OpenCV by Open Source Computer Vision Library
CVE-2019-16249

5.3MEDIUM

Key Information:

Vendor

Opencv

Status
Opencv
Vendor
CVE Published:
11 September 2019

What is CVE-2019-16249?

OpenCV 4.1.1 is affected by an out-of-bounds read vulnerability found in the hal_baseline::v_load function within core/hal/intrin_sse.hpp. This issue is triggered when the function is called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp, leading to potential memory access violations. Exploiting this vulnerability could compromise the integrity of applications utilizing OpenCV for image processing.

References

https://github.com/opencv/opencv/issues/15481
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.