CVE-2019-19624
Fixed in a distro release EPSS 2%
An out-of-bounds read was discovered in OpenCV before 4.1.1. Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.
Products: opencv, redhat enterprise_linux
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | opencv-contrib-python | 4.1.0.25 |
| PyPI | opencv-contrib-python-headless | 4.1.0.25 |
| PyPI | opencv-python | 4.1.0.25 |
| PyPI | opencv-python-headless | 4.1.0.25 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | opencv | 4.1.2+dfsg-3 |
| Debian 13 | opencv | 4.1.2+dfsg-3 |
| Debian 14 | opencv | 4.1.2+dfsg-3 |
| Ubuntu Pro 18.04 LTS | opencv | 3.2.0+dfsg-4ubuntu0.1+esm4 |
| Ubuntu Pro 22.04 LTS | opencv | 4.5.4+dfsg-9ubuntu4+esm1 |