NULL Pointer Dereference in OpenCV.

HIGH 7.5CVE-2019-14493 · GHSA-3448-vrgh-85xr · PYSEC-2026-2795 · Published 01/08/2019 · updated 17/06/2026

Package	Affected versions	Patched versions
opencv-contrib-python PyPI	`< 4.1.1.26`	`4.1.1.26`
opencv-contrib-python-headless PyPI	`< 4.1.1.26`	`4.1.1.26`
opencv-python PyPI	`< 4.1.1.26`	`4.1.1.26`
opencv-python-headless PyPI	`< 4.1.1.26`	`4.1.1.26`
opencv opencv	`< 4.1.1`	`4.1.1`

Description

An issue was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.1.26). There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

NVD description

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

References

nvd.nist.gov/vuln/detail/CVE-2019-14493 · ADVISORY
opencv/opencv · WEB
opencv/opencv-python · PACKAGE
opencv/opencv · WEB
lists.debian.org/debian-lts-announce/2021/10/msg00028.html · WEB
pypi.org/project/opencv-contrib-python · PACKAGE
GitHub Advisory GHSA-3448-vrgh-85xr · ADVISORY
pypi.org/project/opencv-python · PACKAGE
pypi.org/project/opencv-python-headless · PACKAGE
pypi.org/project/opencv-contrib-python-headless · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free