| Package | Affected versions | Patched versions |
|---|---|---|
| opencv-contrib-python | < 4.2.0.32 | 4.2.0.32 |
| opencv-contrib-python-headless | < 4.2.0.32 | 4.2.0.32 |
| opencv-python | < 4.2.0.32 | 4.2.0.32 |
| opencv-python-headless | < 4.2.0.32 | 4.2.0.32 |
| opencv | ≥ 4.0.0, < 4.2.0 | 4.2.0 |
| application testing suite | = 13.3.0.1 | |
| big data spatial and graph | < 2.0 | 2.0 |
| enterprise manager base platform | = 13.4.0.0 |
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 (corresponds with OpenCV-Python version 4.1.2.30). A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free