CVE-2019-15939

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

An issue was discovered in OpenCV 4.1.0. There is a divide-by-zero error in cv::HOGDescriptor::getDescriptorSize in modules/objdetect/src/hog.cpp.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.htmlThird Party Advisory
https://github.com/OpenCV/opencv/issues/15287Third Party Advisory
https://github.com/opencv/opencv/pull/15382Exploit, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/10/msg00028.htmlMailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00025.htmlThird Party Advisory
https://github.com/OpenCV/opencv/issues/15287Third Party Advisory
https://github.com/opencv/opencv/pull/15382Exploit, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/10/msg00028.htmlMailing List, Third Party Advisory

Timeline

Published: Sep 5, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-15947.4A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of CVE-2019-159409.8Victure PC530 devices allow unauthenticated TELNET access as root.CVE-2019-159419.8OpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an attacker to bypass access control rules via a crafted OpenID Connect a CVE-2019-159428.8FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavco CVE-2019-159438.8vphysics.dll in Counter-Strike: Global Offensive before 1.37.1.1 allows remote attackers to achieve code execution or denial of service by c CVE-2019-159445.3In Counter-Strike: Global Offensive before 8/29/2019, community game servers can display unsafe HTML in a disconnection message.CVE-2019-159456.4OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Bitstring in decode_bit_string in libopensc/asn1.c.CVE-2019-159466.4OpenSC before 0.20.0-rc1 has an out-of-bounds access of an ASN.1 Octet string in asn1_decode_entry in libopensc/asn1.c.CVE-2019-159477.5In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mi CVE-2019-159488.8Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a b CVE-2019-159498.8Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as t CVE-2019-15956.5A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, ad