CVE-2019-14491

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrderedcv::HaarEvaluator ↗ in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

It's possible to cause opencv to attempt to read from incorrect or invalid memory when loading specially crafted classifiers (trained data used for object detection), possibly leading to a crash. Although it's technically possible that classifiers are used from untrusted sources, it's probably an unlikely case in practice.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.