high8.8
CVE-2019-5064
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0.
Impact
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opencv | Opencv | from 4.0.0 before 4.2.0 |
| Oracle | Application Testing Suite | Version 13.3.0.1 |
| Oracle | Big Data Spatial And Graph | before 2.0 |
| Oracle | Enterprise Manager Base Platform | Version 13.4.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/opencv/opencv/issues/15857
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0853
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://github.com/opencv/opencv/issues/15857
- https://talosintelligence.com/vulnerability_reports/TALOS-2019-0853
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html