opencv/opencv-python · Security
Improper Input Validation in OpenCV
- GHSA ID
- GHSA-fffj-9qwg-qmh5
- CVE ID
- CVE-2016-1517
- Severity
- medium
- Published
- Updated
- CVSS
- 5.5 · CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS v3
- 5.5 · CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks. This issue was fixed in OpenCV version 3.3.1 (corresponding to OpenCV 3.3.1.11).
CWEs
- CWE-20 · Improper Input Validation