CVE-2019-14491

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 3.4.7 OpenCV versions 4.x prior to 4.1.1

Description The issue is related to an out of bounds read in the cv::predictOrdered<cv::HaarEvaluator> function in modules/objdetect/src/cascadedetect.hpp. This can lead to denial of service and potentially allow a remote attacker to access confidential data.

Recommendations For OpenCV versions prior to 3.4.7, update to version 3.4.7 or later. For OpenCV versions 4.x prior to 4.1.1, update to version 4.1.1 or later. As a temporary workaround, consider disabling the cv::predictOrdered<cv::HaarEvaluator> function until a patch is available.