CVE-2019-14491: Opencv

High severity, CVSS 8.2. EPSS: 2.7% chance of exploitation in the next 30 days.

An issue was discovered in OpenCV before 3.4.7 and 4.x before 4.1.1. There is an out of bounds read in the function cv::predictOrdered<cv::HaarEvaluator> in modules/objdetect/src/cascadedetect.hpp, which leads to denial of service.

Affected products

• Opencv Opencv: before 3.4.7 (fixed in 3.4.7); from 4.0.0, before 4.1.1 (fixed in 4.1.1)

Published 2019-08-01. Last modified 2026-06-17.