Approved changes feed: RSS · Atom

cpe:2.3:a:opencv:opencv:4.1.0:*:*:*:*:*:*:*

part: a version: 4.1.0 update: *

VendorOpencv (90f4fa89-d1f2-50e2-b816-2cd4e6277bef)
ProductOpencv (80f09939-f677-5916-b0ca-72c09196a076)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/opencv purl2cpe 2026-06-01 10:14:52.468836
pkg:deb/ubuntu/opencv purl2cpe 2026-06-01 10:14:52.468838
pkg:github/opencv/opencv purl2cpe 2026-06-01 10:14:52.468839
pkg:gitlab/cleveron/opencv purl2cpe 2026-06-01 10:14:52.468840
pkg:gitlab/immersaview/opencv purl2cpe 2026-06-01 10:14:52.468842
pkg:nuget/OpenCV purl2cpe 2026-06-01 10:14:52.468843
pkg:rpm/fedora/opencv purl2cpe 2026-06-01 10:14:52.468845
pkg:sourceforge/opencvlibrary purl2cpe 2026-06-01 10:14:52.468846

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5063 vulnerable 2026-06-08 05:13:57.624388 Details available
HIGH (8.8)
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
Published: 2020-01-03T16:57:31.000Z
Updated: 2024-08-04T19:47:56.691Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.