VDB
Sign up
HIGH8.2

PYSEC-2026-2797

Out-of-bounds Read in OpenCV

Quick fix

PYSEC-2026-2797 — opencv-contrib-python: upgrade to the fixed version with the command below.

pip install --upgrade 'opencv-contrib-python>=3.4.7.28'

Details

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1 (OpenCV-Python before 3.4.7.28 and 4.x before 4.1.1.26). There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/opencv-contrib-python
Introduced in: 0Fixed in: 3.4.7.28
Fixpip install --upgrade 'opencv-contrib-python>=3.4.7.28'

References