PT-2026-49252 · Julia · Opencv Jll

Publicado 2026-06-05 · Atualizado 2026-06-05

OSV

CVSS v4.0

6.6

Média

Vetor base

AV:L/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.

Correção

Identificadores relacionados

JLSEC-2026-569

Produtos afetados

Opencv Jll

Referências · 5

• https://github.com/opencv/opencv/issues/27271 · Nota
• https://github.com/opencv/opencv/commit/a39db41390de546d18962ee1278bd6dbb715f466 · Nota
• https://github.com/opencv/opencv/releases/tag/4.12.0 · Nota
• https://osv.dev/vulnerability/JLSEC-2026-569 · Aviso do Fabricante
• https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV · Nota