CVE-2019-19624: Out-of-bounds Read

October 12, 2021

An out-of-bounds read was discovered in OpenCV Specifically, variable coarsest_scale is assumed to be greater than or equal to finest_scale within the calc()/ocl_calc() functions in dis_flow.cpp. However, this is not true when dealing with small images, leading to an out-of-bounds read of the heap-allocated arrays Ux and Uy.

References

access.redhat.com/security/cve/cve-2019-19624
github.com/advisories/GHSA-jggw-2q6g-c3m6
github.com/opencv/opencv-python/releases/tag/25
github.com/opencv/opencv/commit/d1615ba11a93062b1429fce9f0f638d1572d3418
github.com/opencv/opencv/issues/14554
nvd.nist.gov/vuln/detail/CVE-2019-19624

Code Behaviors & Features

Detect and mitigate CVE-2019-19624 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →