Double Free Affecting opencv package, versions >=3.0.0, <3.3.1


Severity

Recommended
0.0
high
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.28% (69th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Double Free vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-COCOAPODS-OPENCV-470867
  • published2 Oct 2019
  • disclosed13 Jan 2016
  • creditUnknown

Introduced: 13 Jan 2016

CVE-2016-1516  (opens in a new tab)
CWE-415  (opens in a new tab)

How to fix?

Upgrade OpenCV to version 3.3.1 or higher.

Overview

OpenCV is an OpenCV (Computer Vision) for iOS

Affected versions of this package are vulnerable to Double Free openCV is susceptible to arbitrary code execution through a double free buffer overflow. The vulnerability exists because it does not prevent freeing the same memory address twice when processing an infected image with openCV.

CVSS Scores

version 3.1