GHSA-9g8h-pjm4-q92p

Source
https://github.com/advisories/GHSA-9g8h-pjm4-q92p
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/10/GHSA-9g8h-pjm4-q92p/GHSA-9g8h-pjm4-q92p.json
Aliases
Published
2021-10-12T22:23:41Z
Modified
2023-11-08T04:00:20.596113Z
Summary
Out-of-bounds Write in OpenCV.
Details

In OpenCV 3.3.1 (corresponding with OpenCV-Python 3.3.1.11), a heap-based buffer overflow happens in cv::Jpeg2KDecoder::readComponent8u in modules/imgcodecs/src/grfmt_jpeg2000.cpp when parsing a crafted image file.

References

Affected packages

PyPI / opencv-python

Package

Name
opencv-python

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
3.4.1.15

Affected versions

3.*

3.1.0
3.1.0.0
3.1.0.1
3.1.0.2
3.1.0.3
3.1.0.4
3.1.0.5
3.2.0.6
3.2.0.7
3.2.0.8
3.3.0.9
3.3.0.10
3.3.1.11
3.4.0.12
3.4.0.14

Database specific 

{
    "last_known_affected_version_range": "<= 3.3.1.11"
}

PyPI / opencv-contrib-python

Package

Name
opencv-contrib-python

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0The exact introduced commit is unknown
Fixed
3.4.1.15

Affected versions

3.*

3.1.0.0
3.2.0.7
3.2.0.8
3.3.0.9
3.3.0.10
3.3.1.11
3.4.0.12
3.4.0.14

Database specific 

{
    "last_known_affected_version_range": "<= 3.3.1.11"
}