p PatchFirst

CVE-2025-53644

CVE-2025-53644 · OpenCV contains a use after free buffer write due to an uninitialized pointer

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.

CVSS 6.6 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • opencv

    Versions
    • >= 4.10.0, < 4.12.0: Affected

    No fix published

  • opencv Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.2.0+dfsg-1

    Update to 3.2.0+dfsg-1

  • opencv Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.2.0+dfsg-1

    Update to 3.2.0+dfsg-1

  • opencv Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.2.0+dfsg-1

    Update to 3.2.0+dfsg-1

Original sources

Check your server →