PT-2026-49250 · Julia · Opencv Jll

Published 2026-06-05 · Updated 2026-06-05

OSV

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A vulnerability classified as problematic was found in OpenCV wechat qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded bit stream parser.cpp. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-228547.

Fix

Related Identifiers

JLSEC-2026-567

Affected Products

Opencv Jll

References · 5

• https://osv.dev/vulnerability/JLSEC-2026-567 · Vendor Advisory
• https://github.com/opencv/opencv_contrib/pull/3480 · Note
• https://vuldb.com/?id.228547 · Note
• https://gist.github.com/GZTimeWalker/3ca70a8af2f5830711e9cccc73fb5270 · Note
• https://vuldb.com/?ctiid.228547 · Note