CVE-2019-9423
CVE-2019-9423
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
CVSS 7.8 · High · EPSS 0.3%
- Published
- Updated
Affected products and versions
android
- Versions
- Android-10: Affected
No fix published
opencv-python PyPI
- Versions
- 3.4.0.14
- 3.4.1.15
- 3.4.10.35
- 3.4.10.37
- 3.4.11.39
- 3.4.11.41
- 3.4.11.43
- 3.4.11.45
- 3.4.13.47
- 3.4.14.51
- 3.4.14.53
- 3.4.15.55
- 3.4.16.57
- 3.4.16.59
- 3.4.17.61
- 3.4.17.63
- 3.4.18.65
- 3.4.2.17
- 3.4.3.18
- 3.4.4.19
- 3.4.5.20
- 3.4.6.27
- 3.4.7.28
- 3.4.8.29
- 3.4.9.31
- 3.4.9.33
- 4.0.0.21
- 4.0.1.23
- 4.0.1.24
- 4.1.0.25
- 4.1.1.26
- Affected ranges
- ECOSYSTEM: ≤ 4.1.1.26
No fix published
opencv-python-headless PyPI
- Versions
- 3.4.10.37
- 3.4.11.39
- 3.4.11.41
- 3.4.11.43
- 3.4.11.45
- 3.4.13.47
- 3.4.14.51
- 3.4.14.53
- 3.4.15.55
- 3.4.16.57
- 3.4.16.59
- 3.4.17.61
- 3.4.17.63
- 3.4.18.65
- 3.4.3.18
- 3.4.4.19
- 3.4.5.20
- 3.4.6.27
- 3.4.7.28
- 3.4.8.29
- 3.4.9.33
- 4.0.0.21
- 4.0.1.24
- 4.1.0.25
- 4.1.1.26
- Affected ranges
- ECOSYSTEM: ≤ 4.1.1.26
No fix published
opencv-contrib-python PyPI
- Versions
- 3.4.10.35
- 3.4.10.37
- 3.4.11.39
- 3.4.11.41
- 3.4.11.43
- 3.4.11.45
- 3.4.13.47
- 3.4.14.51
- 3.4.14.53
- 3.4.15.55
- 3.4.16.57
- 3.4.16.59
- 3.4.17.61
- 3.4.17.63
- 3.4.18.65
- 3.4.2.17
- 3.4.3.18
- 3.4.4.19
- 3.4.5.20
- 3.4.6.27
- 3.4.7.28
- 3.4.8.29
- 3.4.9.31
- 3.4.9.33
- 4.0.0.21
- 4.0.1.23
- 4.0.1.24
- 4.1.0.25
- 4.1.1.26
- Affected ranges
- ECOSYSTEM: ≤ 4.1.1.26
No fix published
opencv-contrib-python-headless PyPI
- Versions
- 3.4.0.14
- 3.4.10.37
- 3.4.11.41
- 3.4.11.43
- 3.4.11.45
- 3.4.13.47
- 3.4.14.51
- 3.4.14.53
- 3.4.15.55
- 3.4.16.57
- 3.4.16.59
- 3.4.17.61
- 3.4.17.63
- 3.4.18.65
- 3.4.2.17
- 3.4.3.18
- 3.4.4.19
- 3.4.5.20
- 3.4.6.27
- 3.4.7.28
- 3.4.8.29
- 3.4.9.33
- 4.0.0.21
- 4.0.1.23
- 4.0.1.24
- 4.1.0.25
- 4.1.1.26
- Affected ranges
- ECOSYSTEM: ≤ 4.1.1.26
No fix published
opencv-python PyPI
- Versions
- 3.4.0.14
- 3.4.1.15
- 3.4.10.35
- 3.4.10.37
- 3.4.11.39
- 3.4.11.41
- 3.4.11.43
- 3.4.11.45
- 3.4.13.47
- 3.4.14.51
- 3.4.14.53
- 3.4.15.55
- 3.4.16.57
- 3.4.16.59
- 3.4.17.61
- 3.4.17.63
- 3.4.18.65
- 3.4.2.16
- 3.4.2.17
- 3.4.3.18
- 3.4.4.19
- 3.4.5.20
- 3.4.6.27
- 3.4.7.28
- 3.4.8.29
- 3.4.9.31
- 3.4.9.33
- 4.0.0.21
- 4.0.1.23
- 4.0.1.24
- 4.1.0.25
- 4.1.1.26
- Affected ranges
- ECOSYSTEM: ≤ 4.1.1.26
No fix published
opencv-contrib-python-headless PyPI
- Versions
- 3.4.0.14
- 3.4.1.15
- 3.4.10.37
- 3.4.11.39
- 3.4.11.41
- 3.4.11.43
- 3.4.11.45
- 3.4.13.47
- 3.4.14.51
- 3.4.14.53
- 3.4.15.55
- 3.4.16.57
- 3.4.16.59
- 3.4.17.61
- 3.4.17.63
- 3.4.18.65
- 3.4.2.17
- 3.4.3.18
- 3.4.4.19
- 3.4.5.20
- 3.4.6.27
- 3.4.7.28
- 3.4.8.29
- 3.4.9.33
- 4.0.0.21
- 4.0.1.23
- 4.0.1.24
- 4.1.0.25
- 4.1.1.26
- Affected ranges
- ECOSYSTEM: ≤ 4.1.1.26
No fix published
opencv Ubuntu:Pro:14.04:LTS
- Versions
- 2.4.5+dfsg-0ubuntu4
- 2.4.5+dfsg-0ubuntu5
- 2.4.6.1+dfsg-2ubuntu2
- 2.4.6.1+dfsg-2ubuntu3
- 2.4.6.1+dfsg-2ubuntu4
- 2.4.6.1+dfsg-2ubuntu5
- 2.4.8+dfsg-1ubuntu1
- 2.4.8+dfsg1-2ubuntu1
- 2.4.8+dfsg1-2ubuntu1.2
- 2.4.8+dfsg1-2ubuntu1.2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencv Ubuntu:Pro:16.04:LTS
- Versions
- 2.4.9+dfsg-1ubuntu6
- 2.4.9.1+dfsg-1.2ubuntu1
- 2.4.9.1+dfsg-1.3ubuntu1
- 2.4.9.1+dfsg-1.5ubuntu1
- 2.4.9.1+dfsg-1.5ubuntu1.1
- 2.4.9.1+dfsg-1.5ubuntu1.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencv Ubuntu:Pro:18.04:LTS
- Versions
- 3.1.0+dfsg1-1~exp1ubuntu3
- 3.2.0+dfsg-3
- 3.2.0+dfsg-4
- 3.2.0+dfsg-4build1
- 3.2.0+dfsg-4build2
- 3.2.0+dfsg-4ubuntu0.1
- 3.2.0+dfsg-4ubuntu0.1+esm2
- 3.2.0+dfsg-4ubuntu0.1+esm3
- 3.2.0+dfsg-4ubuntu0.1+esm4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencv Ubuntu:20.04:LTS
- Versions
- 3.2.0+dfsg-6
- 3.2.0+dfsg-6build1
- 3.2.0+dfsg-6build2
- 4.1.2+dfsg-4ubuntu3
- 4.1.2+dfsg-5
- 4.2.0+dfsg-4
- 4.2.0+dfsg-5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencv Ubuntu:Pro:22.04:LTS
- Versions
- 4.5.3+dfsg-1ubuntu1
- 4.5.4+dfsg-9ubuntu2
- 4.5.4+dfsg-9ubuntu4
- 4.5.4+dfsg-9ubuntu4+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencv Ubuntu:24.04:LTS
- Versions
- 4.6.0+dfsg-13build1
- 4.6.0+dfsg-13build3
- 4.6.0+dfsg-13build5
- 4.6.0+dfsg-13.1build2
- 4.6.0+dfsg-13.1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencv Ubuntu:25.10
- Versions
- 4.10.0+dfsg-5
- 4.10.0+dfsg-5ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencv Ubuntu:26.10
- Versions
- 4.10.0+dfsg-7ubuntu5
- 4.10.0+dfsg-7ubuntu6
- 4.10.0+dfsg-8ubuntu1
- 4.10.0+dfsg-9ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
opencv Ubuntu:26.04:LTS
- Versions
- 4.10.0+dfsg-5ubuntu1
- 4.10.0+dfsg-6ubuntu4
- 4.10.0+dfsg-7ubuntu2
- 4.10.0+dfsg-7ubuntu3
- 4.10.0+dfsg-7ubuntu4
- 4.10.0+dfsg-7ubuntu5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://source.android.com/security/bulletin/android-10
- http://www.openwall.com/lists/oss-security/2019/10/25/17
- http://www.openwall.com/lists/oss-security/2019/10/27/1
- http://www.openwall.com/lists/oss-security/2019/11/07/1
- http://www.openwall.com/lists/oss-security/2020/12/05/1
- https://nvd.nist.gov/vuln/detail/CVE-2019-9423