A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-228547.
References
| Link | Resource |
|---|---|
| https://gist.github.com/GZTimeWalker/3ca70a8af2f5830711e9cccc73fb5270 | Product |
| https://github.com/opencv/opencv_contrib/pull/3480 | Issue Tracking Patch |
| https://vuldb.com/?ctiid.228547 | Permissions Required |
| https://vuldb.com/?id.228547 | Permissions Required |
Configurations
History
17 May 2023, 15:52
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Opencv
Opencv opencv |
|
| CPE | cpe:2.3:a:opencv:opencv:*:*:*:*:*:*:*:* | |
| References | (MISC) https://gist.github.com/GZTimeWalker/3ca70a8af2f5830711e9cccc73fb5270 - Product | |
| References | (MISC) https://github.com/opencv/opencv_contrib/pull/3480 - Issue Tracking, Patch | |
| References | (MISC) https://vuldb.com/?ctiid.228547 - Permissions Required | |
| References | (MISC) https://vuldb.com/?id.228547 - Permissions Required |
10 May 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-10 06:15
Updated : 2024-04-11 01:19
NVD link : CVE-2023-2617
Mitre link : CVE-2023-2617
CVE.ORG link : CVE-2023-2617
JSON object : View
Products Affected
opencv
- opencv
CWE
CWE-476
NULL Pointer Dereference