Logo
›
›vulnerability›CVE-2023-2617
Name
CVE-2023-2617
Source
NVD ( link)Debian ( link)
Description
A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-228547.
CWEs
CWE-476 CWE-476
Published Date
Updated Date
Workaround
-
Advisories
https://gist.github.com/GZTimeWalker/3ca70a8af2f5830711e9cccc73fb5270Product
https://github.com/opencv/opencv_contrib/pull/3480Issue Tracking
https://vuldb.com/?ctiid.228547Permissions Required
https://vuldb.com/?id.228547Permissions Required
https://gist.github.com/GZTimeWalker/3ca70a8af2f5830711e9cccc73fb5270Product
https://github.com/opencv/opencv_contrib/pull/3480Issue Tracking
https://vuldb.com/?ctiid.228547Permissions Required
https://vuldb.com/?id.228547Permissions Required
https://github.com/opencv/opencv_contrib/pull/3480Issue Tracking

Analysis#

Affected Component
Analysis
opencv
Patched

Vulnerability Ratings#

5.3
CVSSv31
7.5
CVSSv31
5
CVSSv2
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
opencv3
buildroot
2025.02.x
3.4.19
Not Affected
opencv4
buildroot
2025.02.x
4.12.0
Not Affected
opencv4
buildroot
master
4.13.0
Not Affected
opencv
yocto
master
4.13.0
Not Affected
opencv
yocto
scarthgap
4.9.0
Not Affected

Resolved with patches#

opencv (yocto:kirkstone)

#
Title
Author
Resolve
1
Patch #1
Soumya <soumya.sambu@windriver.com>
CVE-2023-2617