ZeroHour

CVE-2019-5064

PoC
CVSS 3.1
8.8 high
EPSS
11%p96
Published
()
Modified
Description

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability.

Vendors
opencvoracle
Products
opencv, application testing suite, big data spatial and graph, enterprise manager base platform
Weakness
CWE-120, CWE-787
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news