PYSEC-2023-182

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-4863 · ADVISORY
• opencv/opencv · ADVISORY
• opencv/opencv#24274 · FIX

opencv-contrib-python-headless のその他の脆弱性

• GHSA-w2pj-9cgh-mq2c高 8.8opencv-contrib-python-headless bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863
• CVE-2019-5064高 8.8An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A …
• CVE-2019-5063高 8.8An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafte…
• CVE-2019-19624中 6.5An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to…
• CVE-2019-9423高 7.8In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …