CVE-2025-53644

CRITICAL

9.8

Beschreibung

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht7/17/2025

Zuletzt geandert10/17/2025

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

opencv:opencv

Schwachen (CWE)

CWE-457

Referenzen

https://github.com/opencv/opencv/commit/a39db41390de546d18962ee1278bd6dbb715f466(security-advisories@github.com)

https://github.com/opencv/opencv/issues/27271(security-advisories@github.com)

https://github.com/opencv/opencv/releases/tag/4.12.0(security-advisories@github.com)

https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV/(security-advisories@github.com)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.