Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.
Open advisories
30 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.
OpenCV (Open Source Computer Vision Library) through 3.3 (corresponding to OpenCV-Python 3.3.0.9) has an out-of-bounds read error in the function icvCvtBGRA2BGR8uC4C3R when reading an image file by using cv::imread.
Recommended action: Upgrade to 3.3.1.11 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
OpenCV (Open Source Computer Vision Library) through 3.3 (corresponding to OpenCV-Python 3.3.0.9) has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the 8-opencv-invalid-read-fread test case.
Recommended action: Upgrade to 3.3.1.11 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
OpenCV (Open Source Computer Vision Library) through 3.3 (corresponding to opencv-python and opencv-contrib-python through 3.3.0.9) has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread.
Recommended action: Upgrade to 3.3.1.11 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks. This issue was fixed in OpenCV version 3.3.1 (corresponding to OpenCV 3.3.1.11).
Recommended action: Upgrade to 3.3.1.11 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.
OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. This issue was fixed in OpenCV version 3.3.1 (corresponding to OpenCV-Python and and OpenCV-Contrib-Python 3.3.1.11).
Recommended action: Upgrade to 3.3.1.11 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.