CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-9423
High (7.8) in google android. EPSS 0.3% chance of exploitation in the next 30 days.
In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:android
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-8849-5h85-98qw | PyPI | opencv-python | <=4.1.1.26 | no fix published |
| GHSA-8849-5h85-98qw | PyPI | opencv-python-headless | <=4.1.1.26 | no fix published |
| GHSA-8849-5h85-98qw | PyPI | opencv-contrib-python | <=4.1.1.26 | no fix published |
| GHSA-8849-5h85-98qw | PyPI | opencv-contrib-python-headless | <=4.1.1.26 | no fix published |
| PYSEC-2026-2796 | PyPI | opencv-contrib-python | <=4.1.1.26 | no fix published |
| PYSEC-2026-2811 | PyPI | opencv-python | <=4.1.1.26 | no fix published |
| PYSEC-2026-2835 | PyPI | opencv-python-headless | <=4.1.1.26 | no fix published |
| PYSEC-2026-719 | PyPI | opencv-contrib-python-headless | <=4.1.1.26 | no fix published |