CVE-2019-14491
First published: Thu Aug 01 2019(Updated: )
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Opencv Opencv | <3.4.7 | |
| Opencv Opencv | >=4.0.0<4.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html
- https://github.com/opencv/opencv/compare/33b765d...4a7ca5a
- https://github.com/opencv/opencv/compare/371bba8...ddbd10c
- https://github.com/opencv/opencv/issues/15125
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HPFLN6QAX6SUA4XR4NMKKXX26H3TYCVQ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPFLN6QAX6SUA4XR4NMKKXX26H3TYCVQ/
Frequently Asked Questions
What is the vulnerability ID for this OpenCV issue?
The vulnerability ID for this OpenCV issue is CVE-2019-14491.
What is the severity of CVE-2019-14491?
The severity of CVE-2019-14491 is high, with a severity value of 8.2.
What is the affected software for CVE-2019-14491?
The affected software for CVE-2019-14491 is OpenCV versions before 3.4.7 and 4.x before 4.1.1.
What is the CWE ID for CVE-2019-14491?
The CWE ID for CVE-2019-14491 is CWE-125.
How can I fix the CVE-2019-14491 vulnerability?
To fix the CVE-2019-14491 vulnerability, it is recommended to update OpenCV to version 3.4.7 or 4.1.1 or later.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/author
- agent/severity
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/opencv
- canonical/opencv opencv
- version/opencv opencv/4.0.0