CVE:CVE-2019-15939
CNNVD:CNNVD-201909-217
OpenCV是一款开源的、跨平台的、轻量级计算机视觉库。
OpenCV 4.1.0版本中的modules/objdetect/src/hog.cpp文件的cv::HOGDescriptor::getDescriptorSize存在数字错误漏洞。该漏洞源于网络系统或产品未正确计算或转换所产生的数字。攻击者可利用该漏洞导致整数溢出或符号错误等。
solution:Upgrade opencv opencv to a higher version than 4.1.0,and avoid the version (,4.1.0]; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0