Debian Opencv vulnerabilities

CVE-2019-14493 [HIGH] CVE-2019-14493: opencv - An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer derefere... An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp. Scope: local bookworm: resolved (fixed in 4.1.2+dfsg-3) bullseye: resolved (fixed in 4.1.2+dfsg-3) forky: resolved (fixed in 4.1.2+dfsg-3) sid: resolved (fixed in 4.1.2+dfsg-3) trixie: resolved (fixed in 4.1.2+d

CVE-2017-12602 [HIGH] CVE-2017-12602: opencv - OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service... OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-opencv-dos-memory-exhaust test case. Scope: local bookworm: resolved (fixed in 3.2.0+dfsg-6) bullseye: resolved (fixed in 3.2.0+dfsg-6) forky: resolved (fixed in 3.2.0+dfsg-6) sid: resolved (fixed in 3.2.0+dfsg-6) trixie: resolved (fi

CVE-2017-18009 [HIGH] CVE-2017-18009: opencv - In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDec... In OpenCV 3.3.1, a heap-based buffer over-read exists in the function cv::HdrDecoder::checkSignature in modules/imgcodecs/src/grfmt_hdr.cpp. Scope: local bookworm: resolved (fixed in 4.1.2+dfsg-3) bullseye: resolved (fixed in 4.1.2+dfsg-3) forky: resolved (fixed in 4.1.2+dfsg-3) sid: resolved (fixed in 4.1.2+dfsg-3) trixie: resolved (fixed in 4.1.2+dfsg-3)

CVE-2017-12600 [HIGH] CVE-2017-12600: opencv - OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service... OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-dos-cpu-exhaust test case. Scope: local bookworm: resolved (fixed in 3.2.0+dfsg-6) bullseye: resolved (fixed in 3.2.0+dfsg-6) forky: resolved (fixed in 3.2.0+dfsg-6) sid: resolved (fixed in 3.2.0+dfsg-6) trixie: resolved (fixed in

CVE-2019-19624 [MEDIUM] CVE-2019-19624: opencv - An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, varia... An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy. Scope: local bookworm: res

CVE-2017-17760 [MEDIUM] CVE-2017-17760: opencv - OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in g... OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used. Scope: local bookworm: resolved (fixed in 3.2.0+dfsg-6) bullseye: resolved (fixed in 3.2.0+dfsg-6) forky: resolved (fixed in 3.2.0+dfsg-6) sid: resolved (fixed in 3.2.0+dfsg-6) trixie: resolved (fixed in 3.2.0+dfsg-6)

CVE-2019-15939 [MEDIUM] CVE-2019-15939: opencv - An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::... An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp. Scope: local bookworm: resolved (fixed in 4.1.2+dfsg-3) bullseye: resolved (fixed in 4.1.2+dfsg-3) forky: resolved (fixed in 4.1.2+dfsg-3) sid: resolved (fixed in 4.1.2+dfsg-3) trixie: resolved (fixed in 4.1.2+dfsg-3)

CVE-2018-5268 [MEDIUM] CVE-2018-5268: opencv - In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::read... In OpenCV 3.3.1, a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file. Scope: local bookworm: resolved (fixed in 3.2.0+dfsg-6) bullseye: resolved (fixed in 3.2.0+dfsg-6) forky: resolved (fixed in 3.2.0+dfsg-6) sid: resolved (fixed in 3.2.0+dfsg-6) trixie: resolved (fix

CVE-2016-1517 [MEDIUM] CVE-2016-1517: opencv - OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via... OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks. Scope: local bookworm: resolved (fixed in 3.2.0+dfsg-6) bullseye: resolved (fixed in 3.2.0+dfsg-6) forky: resolved (fixed in 3.2.0+dfsg-6) sid: resolved (fixed in 3.2.0+dfsg-6) trixie: resolved (fixed in 3.2.0+dfsg-6)

CVE-2018-5269 [MEDIUM] CVE-2018-5269: opencv - In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modu... In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast. Scope: local bookworm: resolved (fixed in 3.2.0+dfsg-6) bullseye: resolved (fixed in 3.2.0+dfsg-6) forky: resolved (fixed in 3.2.0+dfsg-6) sid: resolved (fixed in 3.2.0+dfsg-6) trixie: resolved (fixed in 3.2.0+dfsg-6)