# opencv-contrib-python (PyPI) vulnerabilities 30 known vulnerabilities (2 high), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://pypi.org/project/opencv-contrib-python/ ## Advisories (30) ### [CVE-2019-5064](https://cve.now/CVE-2019-5064): An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. - Severity: High 8.8 - Published: Jan 3, 2020 - Affected: fixed in 4.2.0.32. ### [CVE-2019-5063](https://cve.now/CVE-2019-5063): An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. - Severity: High 8.8 - Published: Jan 3, 2020 - Affected: through 4.1.0.25. ### [CVE-2019-19624](https://cve.now/CVE-2019-19624): An out-of-bounds read was discovered in OpenCV before 4.1.1. - Severity: Unrated - Published: Dec 6, 2019 - Affected: fixed in 4.1.0.25. ### [CVE-2019-9423](https://cve.now/CVE-2019-9423): In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. - Severity: Unrated - Published: Sep 27, 2019 - Affected: through 4.1.1.26. ### [CVE-2019-16249](https://cve.now/CVE-2019-16249): OpenCV 4.1.1 has an out-of-bounds read in hal\_baseline::v\_load in core/hal/intrin\_sse.hpp when called from computeSSDMeanNorm in… - Severity: Unrated - Published: Sep 11, 2019 - Affected: fixed in 4.1.2.30. ### [CVE-2019-15939](https://cve.now/CVE-2019-15939): An issue was discovered in OpenCV 4.1.0. - Severity: Unrated - Published: Sep 5, 2019 - Affected: fixed in 4.1.1.26. ### [CVE-2019-14493](https://cve.now/CVE-2019-14493): An issue was discovered in OpenCV before 4.1.1. - Severity: Unrated - Published: Aug 1, 2019 - Affected: fixed in 4.1.1.26. ### [CVE-2019-14492](https://cve.now/CVE-2019-14492): An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. - Severity: Unrated - Published: Aug 1, 2019 - Affected: fixed in 3.4.7.28; from 4.0.0.21, fixed in 4.1.1.26; fixed in 3.4.7.28; from 4.0.0.21, fixed in 4.1.1.26. ### [CVE-2019-14491](https://cve.now/CVE-2019-14491): An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. - Severity: Unrated - Published: Aug 1, 2019 - Affected: fixed in 3.4.7.28; from 4.0.0.21, fixed in 4.1.1.26; fixed in 3.4.7.28; from 4.0.0.21, fixed in 4.1.1.26. ### [CVE-2018-5269](https://cve.now/CVE-2018-5269): In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect… - Severity: Unrated - Published: Jan 8, 2018 - Affected: fixed in 3.4.1.15. ### [CVE-2018-5268](https://cve.now/CVE-2018-5268): In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt\_jpeg2000.cpp… - Severity: Unrated - Published: Jan 8, 2018 - Affected: fixed in 3.4.1.15. ### [CVE-2017-1000450](https://cve.now/CVE-2017-1000450): In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer… - Severity: Unrated - Published: Jan 2, 2018 - Affected: fixed in 3.3.1.11. ### [CVE-2017-18009](https://cve.now/CVE-2017-18009): In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt\_hdr.cpp. - Severity: Unrated - Published: Jan 1, 2018 - Affected: fixed in 3.4.1.15. ### [CVE-2017-17760](https://cve.now/CVE-2017-17760): OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt\_pxm.cpp, because an incorrect size value is used. - Severity: Unrated - Published: Dec 29, 2017 - Affected: fixed in 3.4.0.12. ### [CVE-2017-14136](https://cve.now/CVE-2017-14136): OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading… - Severity: Unrated - Published: Sep 4, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12864](https://cve.now/CVE-2017-12864): In opencv/modules/imgcodecs/src/grfmt\_pxm.cpp, function ReadNumber did not checkout the input length, which lead to integer overflow. - Severity: Unrated - Published: Aug 15, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12863](https://cve.now/CVE-2017-12863): In opencv/modules/imgcodecs/src/grfmt\_pxm.cpp, function PxMDecoder::readData has an integer overflow when calculate src\_pitch. - Severity: Unrated - Published: Aug 15, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12862](https://cve.now/CVE-2017-12862): In modules/imgcodecs/src/grfmt\_pxm.cpp, the length of buffer AutoBuffer \_src is small than expected, which will cause copy buffer overflow… - Severity: Unrated - Published: Aug 15, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12606](https://cve.now/CVE-2017-12606): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12605](https://cve.now/CVE-2017-12605): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12604](https://cve.now/CVE-2017-12604): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12603](https://cve.now/CVE-2017-12603): OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12602](https://cve.now/CVE-2017-12602): OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12601](https://cve.now/CVE-2017-12601): OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12600](https://cve.now/CVE-2017-12600): OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12599](https://cve.now/CVE-2017-12599): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt\_BGRA2BGR\_8u\_C4C3R when… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12598](https://cve.now/CVE-2017-12598): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2017-12597](https://cve.now/CVE-2017-12597): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when… - Severity: Unrated - Published: Aug 7, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2016-1517](https://cve.now/CVE-2016-1517): OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks. - Severity: Unrated - Published: Apr 10, 2017 - Affected: fixed in 3.3.1.11. ### [CVE-2016-1516](https://cve.now/CVE-2016-1516): OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. - Severity: Unrated - Published: Apr 10, 2017 - Affected: fixed in 3.3.1.11. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/opencv-contrib-python Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.