CVE-2019-5064: Buffer Overflow
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-5064?
CVE-2019-5064 is a heap buffer overflow vulnerability in the data structure persistence functionality of OpenCV.
How does CVE-2019-5064 work?
CVE-2019-5064 can be exploited by providing a specially crafted JSON file that triggers a buffer overflow, leading to heap corruptions and potentially code execution.
Which software versions are affected by CVE-2019-5064?
OpenCV versions between 4.0.0 and 4.2.0 are affected by CVE-2019-5064.
How severe is CVE-2019-5064?
CVE-2019-5064 has a severity score of 8.8 (high).
How can I fix CVE-2019-5064?
Update OpenCV to version 4.2.0 or higher to fix CVE-2019-5064.