Intel

AIKIDO-2025-10675

opencv is vulnerable to Out-Of-Bounds Read

Out-Of-Bounds Read Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Oct 8, 2025

20

Low Risk

This Affects:

RUSTopencv
0.1.0 - 0.95.1
Fixed in 0.96.0
Are you affected? Scan for Free

TL;DR

Affected versions of this package did not mark cv::MatStep::operator[] as unsafe, although MatStep allows out-of-bound access. If the application did not implement proper bounds checking, this could lead to memory corruption or undefined behavior.

Who does this affect?

You are affected if you use a version within the vulnerable ranges.

Background info

opencv is vulnerable to Out-Of-Bounds Read in versions 0.1.0 - 0.95.1.

How to fix this

Upgrade the library to the patch version, or implement proper bounds checking for MatStep.