| Название | OpenCV wechat_qrcode module has Memory Leak |
|---|
| Описание | Vulnerability in the wechat_qrcode module of OpenCV's extra modules.
Supported versions that are affected are 4.5.2 to 4.7.0.
An attacker can trigger a memory leak in the wechat_qrcode module by constructing a special QR code, which will cause the program using the module to go out of memory and exit abnormally if repeated multiple times.
CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). |
|---|
| Источник | ⚠️ https://github.com/opencv/opencv_contrib/pull/3484 |
|---|
| Пользователь | NanoApe (UID 46329) |
|---|
| Представление | 09.05.2023 18:13 (3 лет назад) |
|---|
| Модерация | 10.05.2023 07:06 (13 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 228548 [OpenCV wechat_qrcode Module до 4.7.0 decoded_bit_stream_parser.cpp decodeHanziSegment отказ в обслуживании] |
|---|
| Баллы | 20 |
|---|