MEDIUM 5.9

PYSEC-2026-722

Divide By Zero in OpenCV.

Details

An issue was discovered in OpenCV 4.1.0 (OpenCV-Python 4.1.0.25). There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / opencv-contrib-python-headless

Introduced in: 0 Fixed in: 4.1.1.26

Fix pip install --upgrade 'opencv-contrib-python-headless>=4.1.1.26'

References

https://nvd.nist.gov/vuln/detail/CVE-2019-15939 [ADVISORY]
https://github.com/OpenCV/opencv/issues/15287 [WEB]
https://github.com/opencv/opencv/pull/15382 [WEB]
https://github.com/opencv/opencv-python [PACKAGE]
https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html [WEB]
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html [WEB]
https://pypi.org/project/opencv-contrib-python-headless [PACKAGE]
https://github.com/advisories/GHSA-hxfw-jm98-v4mq [ADVISORY]