| Package | Affected versions | Patched versions |
|---|---|---|
| opencv-contrib-python | ≤ 4.1.0.25 | |
| opencv-contrib-python-headless | ≤ 4.1.0.25 | |
| opencv-python | ≤ 4.1.0.25 | |
| opencv-python-headless | ≤ 4.1.0.25 | |
| opencv | = 4.1.0 | |
| application testing suite | = 13.3.0.1 | |
| big data spatial and graph | < 2.0 | 2.0 |
| enterprise manager base platform | = 13.4.0.0 |
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 (corresponds with OpenCV-Python 4.1.0.25). A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free