CVE-2019-5063

Name of the Vulnerable Software and Affected Versions OpenCV version 4.1.0 OpenCV-Python version 4.1.0.25

Description A heap buffer overflow issue exists in the data structure persistence functionality. This can be triggered by a specially crafted XML file, causing a buffer overflow and resulting in multiple heap corruptions and potential code execution. An attacker can exploit this by providing a specially crafted file.

Recommendations For OpenCV version 4.1.0, consider avoiding the use of specially crafted XML files until a patch is available. For OpenCV-Python version 4.1.0.25, restrict the processing of XML files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.