Approved changes feed: RSS · Atom
cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Opencv (90f4fa89-d1f2-50e2-b816-2cd4e6277bef) |
|---|---|
| Product | Opencv (80f09939-f677-5916-b0ca-72c09196a076) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/opencv |
purl2cpe | 2026-06-01 10:14:52.467859 |
pkg:deb/ubuntu/opencv |
purl2cpe | 2026-06-01 10:14:52.467861 |
pkg:github/opencv/opencv |
purl2cpe | 2026-06-01 10:14:52.467863 |
pkg:gitlab/cleveron/opencv |
purl2cpe | 2026-06-01 10:14:52.467864 |
pkg:gitlab/immersaview/opencv |
purl2cpe | 2026-06-01 10:14:52.467866 |
pkg:nuget/OpenCV |
purl2cpe | 2026-06-01 10:14:52.467868 |
pkg:rpm/fedora/opencv |
purl2cpe | 2026-06-01 10:14:52.467869 |
pkg:sourceforge/opencvlibrary |
purl2cpe | 2026-06-01 10:14:52.467871 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-53644 |
vulnerable | 2026-06-08 07:31:14.854564 |
OpenCV contains a use after free buffer write due to an uninitialized pointer
OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.
Published: 2025-07-17T17:58:26.493Z
Updated: 2025-09-26T21:56:54.102Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2618 |
vulnerable | 2026-06-08 06:02:42.643725 |
OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeHanziSegment memory leak
MEDIUM (5.3)
A vulnerability, which was classified as problematic, has been found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this issue is the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to memory leak. The attack may be launched remotely. The name of the patch is 2b62ff6181163eea029ed1cab11363b4996e9cd6. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-228548.
Published: 2023-05-10T05:31:04.406Z
Updated: 2024-08-02T06:26:10.033Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2617 |
vulnerable | 2026-06-08 06:02:42.643165 |
OpenCV wechat_qrcode Module decoded_bit_stream_parser.cpp decodeByteSegment null pointer dereference
MEDIUM (5.3)
A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-228547.
Published: 2023-05-10T05:31:03.420Z
Updated: 2025-01-27T18:37:31.782Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-5064 |
vulnerable | 2026-06-08 05:13:57.627279 |
Details available
HIGH (8.8)
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
Published: 2020-01-03T16:57:39.000Z
Updated: 2024-08-04T19:47:55.691Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19624 |
vulnerable | 2026-06-08 05:13:23.195989 |
Details available
An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.
Published: 2019-12-06T14:26:56.000Z
Updated: 2024-08-05T02:25:12.094Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15939 |
vulnerable | 2026-06-08 05:13:07.161666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14493 |
vulnerable | 2026-06-08 05:12:54.912705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14492 |
vulnerable | 2026-06-08 05:12:54.912318 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14491 |
vulnerable | 2026-06-08 05:12:54.911835 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12864 |
vulnerable | 2026-06-08 05:08:47.974814 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12863 |
vulnerable | 2026-06-08 05:08:47.974420 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12862 |
vulnerable | 2026-06-08 05:08:47.973990 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12606 |
vulnerable | 2026-06-08 05:08:47.118408 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12605 |
vulnerable | 2026-06-08 05:08:47.117979 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12604 |
vulnerable | 2026-06-08 05:08:47.117549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12603 |
vulnerable | 2026-06-08 05:08:47.117102 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12602 |
vulnerable | 2026-06-08 05:08:47.116571 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12601 |
vulnerable | 2026-06-08 05:08:47.116234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12600 |
vulnerable | 2026-06-08 05:08:47.115852 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12599 |
vulnerable | 2026-06-08 05:08:47.115495 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12598 |
vulnerable | 2026-06-08 05:08:47.114857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-12597 |
vulnerable | 2026-06-08 05:08:47.114324 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000450 |
vulnerable | 2026-06-08 05:08:34.561915 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.