OpenCV vulnerabilities
We track 3 vulnerabilities in OpenCV products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2025.
Latest OpenCV vulnerabilities
- 9.8 Critical severity
opencv: Use of Uninitialized Variable
OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.
- 7.5 High severity
wechat_qrcode Module: Missing Release of Memory after Effective Lifetime
A vulnerability, which was classified as problematic, has been found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this issue is the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The man
- 7.5 High severity
wechat_qrcode Module: NULL Pointer Dereference
A vulnerability classified as problematic was found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this vulnerability is the function DecodedBitStreamParser::decodeByteSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation