CVE-2019-16249: Out-of-bounds Read

October 12, 2021

OpenCV has an out-of-bounds read in hal_baseline::v_load in core/hal/intrin_sse.hpp when called from computeSSDMeanNorm in modules/video/src/dis_flow.cpp.

References

bugzilla.redhat.com/show_bug.cgi?id=1752702
github.com/advisories/GHSA-x3rm-644h-67m8
github.com/opencv/opencv-python/releases/tag/30
github.com/opencv/opencv/issues/15481
github.com/opencv/opencv/pull/15531
nvd.nist.gov/vuln/detail/CVE-2019-16249

Code Behaviors & Features

Detect and mitigate CVE-2019-16249 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →