PT-2025-29939 · Opencv · Opencv

Jarlob · Published 2025-07-17 · Updated 2025-10-17 · CVE-2025-53644

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenCV versions prior to 4.12.0

Description OpenCV, an Open Source Computer Vision Library, contains an issue where an uninitialized pointer variable on the stack can lead to an arbitrary heap buffer write when processing crafted JPEG images.

Recommendations Update to version 4.12.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-457

Related Identifiers

CVE-2025-53644

Affected Products

Opencv

References · 18

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53644.json · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV · Exploit
• https://github.com/opencv/opencv/commit/a39db41390de546d18962ee1278bd6dbb715f466 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-53644 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53644 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-53644 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53644 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-53644 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-53644 · Security Note
• https://osv.dev/vulnerability/CVE-2025-53644 · Vendor Advisory
• https://github.com/opencv/opencv/releases/tag/4.12.0 · Note
• https://github.com/opencv/opencv/issues/27271 · Note
• https://t.me/cvetracker/28054 · Telegram Post
• https://t.me/cveNotify/130976 · Telegram Post
• https://twitter.com/CVEnew/status/1945912148741530104 · Twitter Post