Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-01797
HistoryDec 23, 2022 - 12:00 a.m.

OpenImageIO heap out-of-bounds write vulnerability

2022-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
openimageio
heap vulnerability
out-of-bounds write
bmp images
arbitrary code execution

0.003 Low

EPSS

Percentile

68.2%

OpenImageIO is an image read and write library that also provides several tools and applications. OpenImageIO v2.3.19.0 is vulnerable to a heap out-of-bounds write vulnerability when processing RLE-encoded BMP images. An attacker could exploit this vulnerability to write arbitrary out-of-bounds memory via specially crafted bmp files, leading to arbitrary code execution.

CPENameOperatorVersion
openimageio openimageio 2.eq3.19.0