CVE-2019-19624
Summary
| CVE | CVE-2019-19624 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2019-12-06 15:15:00 UTC |
|---|
| Updated | 2019-12-17 20:48:00 UTC |
|---|
| Description | An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Red Hat Customer Portal |
MISC |
access.redhat.com |
Third Party Advisory |
| video:fixed DISOpticalFlow segfault from small img · opencv/opencv@d1615ba · GitHub |
MISC |
github.com |
Patch, Third Party Advisory |
| DISOpticalFlow: segfault for small images · Issue #14554 · opencv/opencv · GitHub |
MISC |
github.com |
Exploit, Issue Tracking, Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 980426 Python (pip) Security Update for opencv-contrib-python-headless (GHSA-jggw-2q6g-c3m6)
