CVE-2019-14491: High severity opencv vulnerability
Published Aug 1, 2019
·Updated
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
Affected Software
3 affected componentsFixes available
OpenCV Opencv<3.4.7
OpenCV Opencv>=4.0.0<4.1.1
debian/opencv
4.5.1+dfsg-54.6.0+dfsg-124.6.0+dfsg-144.10.0+dfsg-2
Event History
Aug 1, 2019
CVE Published
via MITRE·04:04 PM
Data Sourced
via MITRE·04:04 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Feb 4, 2025
Data Sourced
via Ubuntu·04:11 PM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·04:12 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this OpenCV issue?
The vulnerability ID for this OpenCV issue is CVE-2019-14491.
2
What is the severity of CVE-2019-14491?
The severity of CVE-2019-14491 is high, with a severity value of 8.2.
3
What is the affected software for CVE-2019-14491?
The affected software for CVE-2019-14491 is OpenCV versions before 3.4.7 and 4.x before 4.1.1.
4
What is the CWE ID for CVE-2019-14491?
The CWE ID for CVE-2019-14491 is CWE-125.
5
How can I fix the CVE-2019-14491 vulnerability?
To fix the CVE-2019-14491 vulnerability, it is recommended to update OpenCV to version 3.4.7 or 4.1.1 or later.