CVE-2019-16249
First published: Wed Sep 11 2019(Updated: )
OpenCV 4.1.1 has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/opencv | <4.1.2 | 4.1.2 |
| Opencv Opencv | =4.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/opencv/opencv/issues/15481
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1752703
- https://github.com/opencv/opencv/commit/cd7fa04985b10db5e66de542725d0da57f0d10b6
- https://github.com/opencv/opencv_contrib/commit/64b3bbb6201b183db37ec3d6bc47c595c150b0d3
- https://github.com/opencv/opencv/pull/13084
- https://github.com/opencv/opencv/commit/c96850ba599ada02dad6bd1a4271ce8f4f20e246
- https://access.redhat.com/security/cve/cve-2019-16249
- https://bugzilla.redhat.com/show_bug.cgi?id=1752702
Frequently Asked Questions
What is the vulnerability ID for this OpenCV vulnerability?
The vulnerability ID for this OpenCV vulnerability is CVE-2019-16249.
What is the severity of CVE-2019-16249?
The severity of CVE-2019-16249 is medium with a CVSS score of 5.3.
What is the affected software and version for CVE-2019-16249?
The affected software and version for CVE-2019-16249 is OpenCV version 4.1.1.
How can I fix CVE-2019-16249?
To fix CVE-2019-16249, update OpenCV to version 4.1.2 or above.
Where can I find more information about CVE-2019-16249?
You can find more information about CVE-2019-16249 in the following references: [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=1752702), [GitHub](https://github.com/opencv/opencv/issues/15481), [Bugzilla](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1752703).
- collector/redhat-bugzilla
- alias/CVE-2019-16249
- collector/nvd-index
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- package-manager/redhat
- vendor/opencv
- canonical/opencv opencv
- version/opencv opencv/4.1.1