Intel

AIKIDO-2025-10675

opencv is vulnerable to Out-Of-Bounds Read

Out-Of-Bounds Read Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Oct 8, 2025

20

Low Risk

This Affects:

RUSTopencv
0.1.0 - 0.95.1
Fixed in 0.96.0
Are you affected? Scan for Free

TL;DR

Affected versions of this package did not mark cv::MatStep::operator[] as unsafe, although MatStep allows out-of-bound access. If the application did not implement proper bounds checking, this could lead to memory corruption or undefined behavior.

Who does this affect?

You are affected if you use a version within the vulnerable ranges.

Background info

opencv is vulnerable to Out-Of-Bounds Read in versions 0.1.0 - 0.95.1.

How to fix this

Upgrade the library to the patch version, or implement proper bounds checking for MatStep.

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform