Lucene search

China National Vulnerability DatabaseCNVD-2023-01789

HistoryDec 23, 2022 - 12:00 a.m.

OpenImageIO code execution vulnerability

2022-12-2300:00:00

China National Vulnerability Database

www.cnvd.org.cn

openimageio

image library

code execution

vulnerability

heap buffer overflow

dds scanline parsing

0.005 Low

EPSS

Percentile

76.2%

JSON

OpenImageIO is an image read and write library that also provides several tools and applications. a code execution vulnerability exists in the OpenImageIO DDS scanline parsing feature. An attacker could exploit the vulnerability to cause a heap buffer overflow via a specially crafted .dds.

CPENameOperatorVersion
openimageio openimageio 2.eq4.4.2

CPE	Name	Operator	Version
	openimageio openimageio 2.	eq	4.4.2

0.005 Low

EPSS

Percentile

76.2%

JSON

Related for CNVD-2023-01789