CVE-2019-14493

HIGH

OpenCV < 4.1.1 - NULL Pointer Dereference in XML Parser

Title source: llm
STIX 2.1

Description

An issue was discovered in OpenCV before 4.1.1. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_misc
https://github.com/opencv/opencv/compare/371bba8...ddbd10c
Exploit, Third Party Advisory x_refsource_misc
https://github.com/opencv/opencv/issues/15127
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2021/10/msg00028.html

Scores

CVSS v3 7.5
EPSS 0.0337
EPSS Percentile 87.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-476
Status published
Products (6)
debian/debian_linux 9.0
opencv/opencv < 4.1.1
pypi/opencv-contrib-python 0 - 4.1.1.26PyPI
pypi/opencv-contrib-python-headless 0 - 4.1.1.26PyPI
pypi/opencv-python 0 - 4.1.1.26PyPI
pypi/opencv-python-headless 0 - 4.1.1.26PyPI
Published Aug 01, 2019
Tracked Since Feb 18, 2026