CVE-2023-39010
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability can be exploited by loading a crafted camera calibration file.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized code execution, posing a serious threat to the security of the application and user data.
Recommendation
It is recommended to update BoofCV to the latest version to mitigate this vulnerability and to validate calibration files before loading them.
Original NVD description (English source)
BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file.