How to confirm the issue CVE-2019-9423 is fixed or not？

[caihuajin]

How to confirm the following issue is fixed or not？

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9423

[alalek]

There is no detail provided from mentioned link or through https://github.com/opencv/opencv/blob/master/SECURITY.md

@vrabaud Do you have any information about this record?

[caihuajin]

There is no detail provided from mentioned link or through https://github.com/opencv/opencv/blob/master/SECURITY.md

@vrabaud Do you have any information about this record?
There is no detail to provide，because of currently there is no corresponding problem to reproduce. But this is a potential risk for our project.

[alalek]

If you don't use imread/imdecode calls from unknown external sources (or don't use whole imgcodecs module), then you don't have any risk.

Risk estimation without any details is tricky.

[aakash665]

My Doubt: In an RNN,lets take an input data as [[2,3,4],[2,4,6],[5,6,8],[3,6,8] [3,5,7],[1,2,4],[5,7,8],[75,4,] [4,4,6],[0,6,0],[2,5,3],[2,2,2] [1,1,1],[4,8,0],[2,4,3],[6,4,0] [3,5,7],[1,2,4],[5,7,8],[75,4,]] This is a 3D array of shape (5,4,3).Am I right? My question is How is this input data processed in a RNN? How the dimension of the weight matrix(between input and hidden neuron) is determined? How the dimension of the another weight matrix(between hidden neuron and previous hidden state) is determined? How does the input data undergo computation? I know the equations. s(t) = tanh[Ux + Ws(t-1)] y(t) = softmax[Vs(t)] I need to know how the matrix is multiplied and the bias is added? I don't know how to determine the shape of the bias and other weight vectors(U,V,W). I need to know the computation in detail. You can suggest some related articles to read. Thank you

…

On Tue, Jun 8, 2021, 2:20 PM Alexander Alekhin ***@***.***> wrote: If you don't use imread/imdecode calls from unknown external sources (or don't use whole imgcodecs module), then you don't have any risk. Risk estimation without any details is tricky. — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#20239 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ARKUEDDJTJLSKMI3KACOXL3TRXKWBANCNFSM46JGBYJQ> .

[caihuajin]

If you don't use imread/imdecode calls from unknown external sources (or don't use whole imgcodecs module), then you don't have any risk.

Risk estimation without any details is tricky.

Does anyone else who can help answer this issue, Is there a commit for this security issue?