Out-of-bounds Read in OpenCV

TRUNG BÌNH 6.5CVE-2019-19624 · GHSA-jggw-2q6g-c3m6 · PYSEC-2026-2800 · Công bố 06/12/2019 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2019-19624 là lỗ hổng mức TRUNG BÌNH (CVSS 6.5) ảnh hưởng opencv-contrib-python, opencv-contrib-python-headless, opencv-python.
Xác suất bị khai thác trong 30 ngày tới (EPSS): 1.8%, cao hơn 77.9% các lỗ hổng khác.
Cách xử lý: cập nhật lên 4.1.0.25, 4.1.1 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
opencv-contrib-python PyPI	`< 4.1.0.25`	`4.1.0.25`
opencv-contrib-python-headless PyPI	`< 4.1.0.25`	`4.1.0.25`
opencv-python PyPI	`< 4.1.0.25`	`4.1.0.25`
opencv-python-headless PyPI	`< 4.1.0.25`	`4.1.0.25`
opencv opencv	`< 4.1.1`	`4.1.1`

Mô tả

An out-of-bounds read was discovered in OpenCV before 4.1.1 (OpenCV-Python before 4.1.0.25). Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.

Mô tả của NVD

An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.