Lucene search

China National Vulnerability DatabaseCNVD-2023-01795

HistoryDec 23, 2022 - 12:00 a.m.

OpenImageIO heap out-of-bounds read vulnerability

2022-12-2300:00:00

China National Vulnerability Database

www.cnvd.org.cn

openimageio

heap vulnerability

out-of-bounds read

rla files

information disclosure

attacker exploit

0.001 Low

EPSS

Percentile

31.5%

JSON

OpenImageIO is an image read and write library that also provides several tools and applications. openImageIO is vulnerable to a heap out-of-bounds read vulnerability. An attacker can exploit this vulnerability to read heap metadata out of bounds via specially crafted RLA files, which can lead to sensitive information disclosure.

CPENameOperatorVersion
openimageio openimageio 2.eq3.19.0

CPE	Name	Operator	Version
	openimageio openimageio 2.	eq	3.19.0

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for CNVD-2023-01795