CVE-2019-14491
- Source
- https://cve.org/CVERecord?id=CVE-2019-14491
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-14491.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2019-14491
- Aliases
- Downstream
- Related
- Published
- 2019-08-01T17:15:13.453Z
- Modified
- 2026-02-03T07:03:51.342054Z
- Severity
-
- 8.2 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.
- References
-
- http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPFLN6QAX6SUA4XR4NMKKXX26H3TYCVQ/
- https://github.com/opencv/opencv/compare/33b765d...4a7ca5a
- https://github.com/opencv/opencv/compare/371bba8...ddbd10c
- https://github.com/opencv/opencv/issues/15125
- https://github.com/opencv/opencv/issues/15125
Affected packages
Git / github.com/opencv/opencv
Database specific
vanir_signatures
[
{
"signature_type": "Line",
"source": "https://github.com/opencv/opencv/commit/693877212d34f2d5e3bbf29287aa1db2d07d4d6d",
"target": {
"file": "modules/videoio/src/backend_plugin.cpp"
},
"id": "CVE-2019-14491-f4b69b89",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"324810334612706110929790317977131335514",
"283354122908894961945064184555133515053",
"29337495017562247810249731437058366319",
"15156896965861494906414910206189503336"
]
},
"deprecated": false
}
]
source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-14491.json"