CVE-2018-5269
Fixed in a distro release EPSS 1%
In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast.
Products: opencv, debian_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | opencv-contrib-python | 3.4.1.15 |
| PyPI | opencv-python | 3.4.1.15 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | opencv | 3.2.0+dfsg-6 |
| Debian 13 | opencv | 3.2.0+dfsg-6 |
| Debian 14 | opencv | 3.2.0+dfsg-6 |
| Debian 7 | opencv | 2.3.1-11+deb7u4 |
| Debian 8 | opencv | 2.4.9.1+dfsg-1+deb8u2 |
| Debian 9 | opencv | 2.4.9.1+dfsg1-2+deb9u1 |
| Ubuntu 16.04 LTS | opencv | 2.4.9.1+dfsg-1.5ubuntu1.1 |
| Ubuntu 18.04 LTS | opencv | 3.2.0+dfsg-4ubuntu0.1 |