MEDIUM5.9

PYSEC-2026-2838

Divide By Zero in OpenCV.

Quick fix

PYSEC-2026-2838 — opencv-python-headless: upgrade to the fixed version with the command below.

pip install --upgrade 'opencv-python-headless>=4.1.1.26'

Details

An issue was discovered in OpenCV 4.1.0 (OpenCV-Python 4.1.0.25). There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/opencv-python-headless

Introduced in: 0Fixed in: 4.1.1.26

Fixpip install --upgrade 'opencv-python-headless>=4.1.1.26'

References

https://nvd.nist.gov/vuln/detail/CVE-2019-15939[ADVISORY]
https://github.com/OpenCV/opencv/issues/15287[WEB]
https://github.com/opencv/opencv/pull/15382[WEB]
https://github.com/opencv/opencv-python[PACKAGE]
https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html[WEB]
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.html[WEB]
https://pypi.org/project/opencv-python-headless[PACKAGE]
https://github.com/advisories/GHSA-hxfw-jm98-v4mq[ADVISORY]