CVE-2025-53644
9.8
CRITICAL
CVSS 3.1
EPSS 0.23%
Description
OpenCV is an Open Source Computer Vision Library. Versions 4.10.0 and 4.11.0 have an uninitialized pointer variable on stack that may lead to arbitrary heap buffer write when reading crafted JPEG images. Version 4.12.0 fixes the vulnerability.
How to fix CVE-2025-53644
To remediate CVE-2025-53644, upgrade the affected package to a fixed version below.
- Debian/opencv—upgrade to 3.2.0+dfsg-1 or later
Is CVE-2025-53644 being exploited?
Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 3.2.0+dfsg-1
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |