{
  "cveId": "CVE-2023-2618",
  "url": "https://patchblox.com/security/cve/CVE-2023-2618",
  "summary": "CVE-2023-2618 is fixed in 24 products on 1 platform, first by libopencv-calib3d4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1, released May 9, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "libopencv4.5d-jni: A vulnerability, which was classified as problematic, has been found in OpenCV wechat_qrcode Module up to 4.7.0",
  "description": "A vulnerability, which was classified as problematic, has been found in OpenCV wechat_qrcode Module up to 4.7.0. Affected by this issue is the function DecodedBitStreamParser::decodeHanziSegment of the file qrcode/decoder/decoded_bit_stream_parser.cpp. The manipulation leads to memory leak. The attack may be launched remotely. The name of the patch is 2b62ff6181163eea029ed1cab11363b4996e9cd6. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-228548.",
  "published": "2023-05-09T23:15:00Z",
  "severity": "Medium",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.01303,
  "epssPercentile": 0.70662,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libopencv-calib3d4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-calib3d4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-calib3d4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-contrib4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-contrib4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-contrib4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-core4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-core4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-core4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-dnn4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-dnn4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-dnn4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-features2d4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-features2d4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-features2d4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-flann4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-flann4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-flann4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-highgui4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-highgui4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-highgui4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-imgcodecs4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-imgcodecs4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-imgcodecs4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-imgproc4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-imgproc4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-imgproc4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-ml4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-ml4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-ml4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-objdetect4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-objdetect4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-objdetect4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-photo4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-photo4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-photo4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-shape4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-shape4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-shape4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-stitching4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-stitching4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-stitching4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-superres4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-superres4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-superres4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-video4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-video4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-video4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-videoio4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-videoio4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-videoio4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-videostab4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-videostab4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-videostab4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv-viz4.5d",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv-viz4.5d 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv-viz4.5d-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv4.5-java",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv4.5-java 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv4.5-java-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libopencv4.5d-jni",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "libopencv4.5d-jni 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libopencv4.5d-jni-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "opencv",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "4.6.0\u002Bdfsg-12",
      "fix": "DEBIAN-CVE-2023-2618",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2618",
      "released": "2023-05-10T06:15:17Z"
    },
    {
      "platform": "linux",
      "product": "opencv",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "4.6.0\u002Bdfsg-12",
      "fix": "DEBIAN-CVE-2023-2618",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2618",
      "released": "2023-05-10T06:15:17Z"
    },
    {
      "platform": "linux",
      "product": "opencv",
      "release": "Debian 14",
      "fixedVersion": "4.6.0\u002Bdfsg-12",
      "fix": "DEBIAN-CVE-2023-2618",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-2618",
      "released": "2023-05-10T06:15:17Z"
    },
    {
      "platform": "linux",
      "product": "opencv-data",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "opencv-data 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-opencv-data-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-opencv",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "fix": "python3-opencv 4.5.4\u002Bdfsg-9ubuntu4\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-python3-opencv-4.5.4-dfsg-9ubuntu4-esm1",
      "released": "2023-05-09T23:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}