{"id":"CVE-2019-9423","aliases":["EUVD-2021-2177","GHSA-8849-5h85-98qw","PYSEC-2026-2796","PYSEC-2026-2811","PYSEC-2026-2835","PYSEC-2026-719","UBUNTU-CVE-2019-9423"],"status":"published","title":"Out-of-bounds Write in OpenCV","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00291,"percentile":0.21869,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2019-09-27T18:05:18Z","modified":"2026-10-17T12:55:50Z","affected":[{"source":"ghsa","ecosystem":"PyPI","package":"opencv-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"opencv-python-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"opencv-contrib-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"opencv-contrib-python-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}]},{"source":"osv","ecosystem":"PyPI","package":"opencv-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}],"versions":["3.4.0.14","3.4.1.15","3.4.10.35","3.4.10.37","3.4.11.39","3.4.11.41","3.4.11.43","3.4.11.45","3.4.13.47","3.4.14.51","3.4.14.53","3.4.15.55","3.4.16.57","3.4.16.59","3.4.17.61","3.4.17.63","3.4.18.65","3.4.2.17","3.4.3.18","3.4.4.19","3.4.5.20","3.4.6.27","3.4.7.28","3.4.8.29","3.4.9.31","3.4.9.33","4.0.0.21","4.0.1.23","4.0.1.24","4.1.0.25","4.1.1.26"]},{"source":"osv","ecosystem":"PyPI","package":"opencv-python-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}],"versions":["3.4.10.37","3.4.11.39","3.4.11.41","3.4.11.43","3.4.11.45","3.4.13.47","3.4.14.51","3.4.14.53","3.4.15.55","3.4.16.57","3.4.16.59","3.4.17.61","3.4.17.63","3.4.18.65","3.4.3.18","3.4.4.19","3.4.5.20","3.4.6.27","3.4.7.28","3.4.8.29","3.4.9.33","4.0.0.21","4.0.1.24","4.1.0.25","4.1.1.26"]},{"source":"osv","ecosystem":"PyPI","package":"opencv-contrib-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}],"versions":["3.4.10.35","3.4.10.37","3.4.11.39","3.4.11.41","3.4.11.43","3.4.11.45","3.4.13.47","3.4.14.51","3.4.14.53","3.4.15.55","3.4.16.57","3.4.16.59","3.4.17.61","3.4.17.63","3.4.18.65","3.4.2.17","3.4.3.18","3.4.4.19","3.4.5.20","3.4.6.27","3.4.7.28","3.4.8.29","3.4.9.31","3.4.9.33","4.0.0.21","4.0.1.23","4.0.1.24","4.1.0.25","4.1.1.26"]},{"source":"osv","ecosystem":"PyPI","package":"opencv-contrib-python-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}],"versions":["3.4.0.14","3.4.10.37","3.4.11.41","3.4.11.43","3.4.11.45","3.4.13.47","3.4.14.51","3.4.14.53","3.4.15.55","3.4.16.57","3.4.16.59","3.4.17.61","3.4.17.63","3.4.18.65","3.4.2.17","3.4.3.18","3.4.4.19","3.4.5.20","3.4.6.27","3.4.7.28","3.4.8.29","3.4.9.33","4.0.0.21","4.0.1.23","4.0.1.24","4.1.0.25","4.1.1.26"]},{"source":"osv","ecosystem":"PyPI","package":"opencv-contrib-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}],"versions":["3.4.10.35","3.4.10.37","3.4.11.39","3.4.11.41","3.4.11.43","3.4.11.45","3.4.13.47","3.4.14.51","3.4.14.53","3.4.15.55","3.4.16.57","3.4.16.59","3.4.17.61","3.4.17.63","3.4.18.65","3.4.2.17","3.4.3.18","3.4.4.19","3.4.5.20","3.4.6.27","3.4.7.28","3.4.8.29","3.4.9.31","3.4.9.33","4.0.0.21","4.0.1.23","4.0.1.24","4.1.0.25","4.1.1.26"]},{"source":"osv","ecosystem":"PyPI","package":"opencv-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}],"versions":["3.4.0.14","3.4.1.15","3.4.10.35","3.4.10.37","3.4.11.39","3.4.11.41","3.4.11.43","3.4.11.45","3.4.13.47","3.4.14.51","3.4.14.53","3.4.15.55","3.4.16.57","3.4.16.59","3.4.17.61","3.4.17.63","3.4.18.65","3.4.2.16","3.4.2.17","3.4.3.18","3.4.4.19","3.4.5.20","3.4.6.27","3.4.7.28","3.4.8.29","3.4.9.31","3.4.9.33","4.0.0.21","4.0.1.23","4.0.1.24","4.1.0.25","4.1.1.26"]},{"source":"osv","ecosystem":"PyPI","package":"opencv-python-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}],"versions":["3.4.10.37","3.4.11.39","3.4.11.41","3.4.11.43","3.4.11.45","3.4.13.47","3.4.14.51","3.4.14.53","3.4.15.55","3.4.16.57","3.4.16.59","3.4.17.61","3.4.17.63","3.4.18.65","3.4.3.18","3.4.4.19","3.4.5.20","3.4.6.27","3.4.7.28","3.4.8.29","3.4.9.33","4.0.0.21","4.0.1.24","4.1.0.25","4.1.1.26"]},{"source":"osv","ecosystem":"PyPI","package":"opencv-contrib-python-headless","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"4.1.1.26"}]}],"versions":["3.4.0.14","3.4.1.15","3.4.10.37","3.4.11.39","3.4.11.41","3.4.11.43","3.4.11.45","3.4.13.47","3.4.14.51","3.4.14.53","3.4.15.55","3.4.16.57","3.4.16.59","3.4.17.61","3.4.17.63","3.4.18.65","3.4.2.17","3.4.3.18","3.4.4.19","3.4.5.20","3.4.6.27","3.4.7.28","3.4.8.29","3.4.9.33","4.0.0.21","4.0.1.23","4.0.1.24","4.1.0.25","4.1.1.26"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.5+dfsg-0ubuntu4","2.4.5+dfsg-0ubuntu5","2.4.6.1+dfsg-2ubuntu2","2.4.6.1+dfsg-2ubuntu3","2.4.6.1+dfsg-2ubuntu4","2.4.6.1+dfsg-2ubuntu5","2.4.8+dfsg-1ubuntu1","2.4.8+dfsg1-2ubuntu1","2.4.8+dfsg1-2ubuntu1.2","2.4.8+dfsg1-2ubuntu1.2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9+dfsg-1ubuntu6","2.4.9.1+dfsg-1.2ubuntu1","2.4.9.1+dfsg-1.3ubuntu1","2.4.9.1+dfsg-1.5ubuntu1","2.4.9.1+dfsg-1.5ubuntu1.1","2.4.9.1+dfsg-1.5ubuntu1.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.0+dfsg1-1~exp1ubuntu3","3.2.0+dfsg-3","3.2.0+dfsg-4","3.2.0+dfsg-4build1","3.2.0+dfsg-4build2","3.2.0+dfsg-4ubuntu0.1","3.2.0+dfsg-4ubuntu0.1+esm2","3.2.0+dfsg-4ubuntu0.1+esm3","3.2.0+dfsg-4ubuntu0.1+esm4"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.0+dfsg-6","3.2.0+dfsg-6build1","3.2.0+dfsg-6build2","4.1.2+dfsg-4ubuntu3","4.1.2+dfsg-5","4.2.0+dfsg-4","4.2.0+dfsg-5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.3+dfsg-1ubuntu1","4.5.4+dfsg-9ubuntu2","4.5.4+dfsg-9ubuntu4","4.5.4+dfsg-9ubuntu4+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.6.0+dfsg-13build1","4.6.0+dfsg-13build3","4.6.0+dfsg-13build5","4.6.0+dfsg-13.1build2","4.6.0+dfsg-13.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.10.0+dfsg-5","4.10.0+dfsg-5ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.10.0+dfsg-7ubuntu5","4.10.0+dfsg-7ubuntu6","4.10.0+dfsg-8ubuntu1","4.10.0+dfsg-9ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"opencv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.10.0+dfsg-5ubuntu1","4.10.0+dfsg-6ubuntu4","4.10.0+dfsg-7ubuntu2","4.10.0+dfsg-7ubuntu3","4.10.0+dfsg-7ubuntu4","4.10.0+dfsg-7ubuntu5"]}],"products":[{"vendor":"google","product":"android"}],"references":[{"url":"https://source.android.com/security/bulletin/android-10","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","web","report"]},{"url":"http://www.openwall.com/lists/oss-security/2019/10/25/17","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2019/10/27/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2019/11/07/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2020/12/05/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-9423","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8849-5h85-98qw","tags":["advisory"]},{"url":"https://github.com/opencv/opencv-python","tags":["package"]},{"url":"https://pypi.org/project/opencv-contrib-python","tags":["package"]},{"url":"https://pypi.org/project/opencv-python","tags":["package"]},{"url":"https://pypi.org/project/opencv-python-headless","tags":["package"]},{"url":"https://pypi.org/project/opencv-contrib-python-headless","tags":["package"]},{"url":"https://ubuntu.com/security/CVE-2019-9423","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2019/11/07/1","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-9423","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-9423","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2019-09-27T18:05:18Z","modified":"2024-08-04T21:46:30.491Z","updated_at":"2026-11-02T14:20:20.081405Z"}],"euvd":[{"id":"EUVD-2021-2177","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2019-09-27T18:05:18Z","modified":"2024-08-04T21:46:30Z","updated_at":"2026-11-03T03:06:38.242317Z"}],"ghsa":[{"id":"GHSA-8849-5h85-98qw","title":"Out-of-bounds Write in OpenCV","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2021-10-12T22:22:17Z","modified":"2023-02-01T05:06:11Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:36:37.441118Z"}],"nvd":[{"id":"CVE-2019-9423","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2019-09-27T19:15:28.217Z","modified":"2026-06-17T02:43:42.733Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:05:30.039477Z"}],"osv":[{"id":"GHSA-8849-5h85-98qw","title":"Out-of-bounds Write in OpenCV","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2021-10-12T22:22:17Z","modified":"2026-09-10T03:49:09.258983938Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:46:42.077781Z"},{"id":"PYSEC-2026-2796","title":"Out-of-bounds Write in OpenCV","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2026-07-09T16:49:37.555297Z","modified":"2026-07-13T16:42:46.853633053Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:55.961245Z"},{"id":"PYSEC-2026-2811","title":"Out-of-bounds Write in OpenCV","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2026-07-09T16:49:37.351666Z","modified":"2026-07-13T16:42:46.853633053Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:56.429374Z"},{"id":"PYSEC-2026-2835","title":"Out-of-bounds Write in OpenCV","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2026-07-09T16:49:37.442309Z","modified":"2026-07-13T16:42:46.853633053Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:56.429374Z"},{"id":"PYSEC-2026-719","title":"Out-of-bounds Write in OpenCV","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2026-07-02T14:13:13.1639Z","modified":"2026-07-13T16:42:46.853633053Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"UBUNTU-CVE-2019-9423","description":"In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android ID: A-110986616","status":"published","published":"2019-09-27T19:15:00Z","modified":"2026-10-17T12:55:50.48450651Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"}]}}