CVE-2025-53644

Katalog CVE

CVSS 9.8 · Critical EPSS 0,41%

Kerentanan Use of Uninitialized Variable pada opencv. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.

Rincian

Terbit di NVD

17 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-457: Use of Uninitialized Variable

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/opencv/opencv/commit/a39db41390de546d18962ee1278bd6dbb715f466 patch
• https://securitylab.github.com/advisories/GHSL-2025-057_OpenCV/ exploit · advisory pihak ketiga
• https://github.com/opencv/opencv/issues/27271 issue tracking
• https://github.com/opencv/opencv/releases/tag/4.12.0 release notes