GHSA-rqxg-xvcq-3v2f

Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/10/GHSA-rqxg-xvcq-3v2f/GHSA-rqxg-xvcq-3v2f.json
Aliases
Published
2021-10-12T22:02:04Z
Modified
2022-09-19T02:26:47.307090Z
Details

OpenCV (Open Source Computer Vision Library) through 3.3 (corresponding to OpenCV-Python and OpenCV-Contrib-Python 3.3.0.9) has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when reading an image file by using cv::imread.

References

Affected packages

PyPI / opencv-python

opencv-python

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0
Fixed
3.3.1.11

Affected versions

3.*

3.1.0
3.1.0.0
3.1.0.1
3.1.0.2
3.1.0.3
3.1.0.4
3.1.0.5
3.2.0.6
3.2.0.7
3.2.0.8
3.3.0.10
3.3.0.9

Database specific

{
    "last_known_affected_version_range": "<= 3.3.0.9"
}

PyPI / opencv-contrib-python

opencv-contrib-python

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0
Fixed
3.3.1.11

Affected versions

3.*

3.1.0.0
3.2.0.7
3.2.0.8
3.3.0.10
3.3.0.9

Database specific

{
    "last_known_affected_version_range": "<= 3.3.0.9"
}