CVE-2019-9423 for opencv-python

Open
#1,141 0 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
opencv, python
Domain
build-system, security

Research direction

Start by examining the opencv-python packaging and build configuration for how libpng is included in the generated wheels. Confirm whether the bundled dependency is affected by CVE-2019-9423 and verify that rebuilt packages no longer trigger the reported SCA finding.

Written by the indexing model from the issue text.

Description

SCA raises a high severity CVE for opencv and I can't see any issue related to that.

OUT-OF-BOUNDS WRITE IN OPENCV-CONTRIB-PYTHON --> CVE-2019-9423

An update of libpng should fix it (like previous case here), could anybody help on this please ?

Thanks 😄

Dominant language
Python
Stars
5.4k
Forks
1k
Avg merge
22h 17m
Merged PRs (30d)
3

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from opencv/opencv-python

All issues in opencv/opencv-python

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.