CVE-2025-53644

CRITICAL

9.8

Description

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie7/17/2025

Derniere modification10/17/2025

Sourcenvd

Observations honeypot0

Produits affectes

opencv:opencv

Faiblesses (CWE)

CWE-457

References

https://github.com/opencv/opencv/commit/a39db41390de546d18962ee1278bd6dbb715f466(security-advisories@github.com)

https://github.com/opencv/opencv/issues/27271(security-advisories@github.com)

https://github.com/opencv/opencv/releases/tag/4.12.0(security-advisories@github.com)

https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV/(security-advisories@github.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.