AIKIDO-2026-10414

TL;DR

Affected versions of this package contain a Use of Uninitialized Variable vulnerability in OpenCV’s JPEG2000 header parsing, where an uninitialized stack pointer may be used after a crafted image causes header parsing to fail, resulting in unintended writes to attacker-influenced memory. By supplying malicious JPEG2000/JP2 images, an attacker may corrupt heap memory and potentially turn this write primitive into arbitrary memory overwrite and code execution, depending on application state and memory layout.