GHSA-fffj-9qwg-qmh5

ghsaUSosv

Improper Input Validation in OpenCV

view advisory published 2021-10-12Licence: CC-BY-4.0

OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks. This issue was fixed in OpenCV version 3.3.1 (corresponding to OpenCV 3.3.1.11).

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2016-1517US	medium5.5	1.08% (65th)	—	2017-04-10
OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.

references

External citations — patches, advisories, analysis.

https://arxiv.org/pdf/1701.04739.pdfWEB
https://github.com/opencv/opencv-pythonPACKAGE
https://github.com/opencv/opencv/issues/5956WEB
https://github.com/opencv/opencv/pull/9376WEB
https://nvd.nist.gov/vuln/detail/CVE-2016-1517ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan