CVE-2019-5063

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.

References

Affected packages

Git / github.com/opencv/opencv

Affected ranges

Type

GIT

Repo

https://github.com/opencv/opencv

Events

Introduced

Last affected

00171ca935d945ec9831d67ff0ef020f078cd19a

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.1.0"
        }
    ]
}

Affected versions

2.*

2.2

3.*

3.2.0-rc

3.3.0-rc

3.4.0-rc

4.*

4.1.0-openvino

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-5063.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.3.0.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "2.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.4.0.0"
            }
        ]
    }
]