Lucene search

China National Vulnerability DatabaseCNVD-2023-01798

HistoryDec 23, 2022 - 12:00 a.m.

OpenImageIO Stack Buffer Overflow Vulnerability

2022-12-2300:00:00

China National Vulnerability Database

www.cnvd.org.cn

openimageio

buffer overflow

tga parser

vulnerability

arbitrary code execution

image library

0.002 Low

EPSS

Percentile

56.5%

JSON

OpenImageIO is an image read and write library that also provides several tools and applications. A stack buffer overflow vulnerability exists in the TGA file format parser in OpenImageIO v2.3.19.0. An attacker could exploit this vulnerability to cause out-of-bounds writes and arbitrary code execution via specially crafted targa files.

CPENameOperatorVersion
openimageio openimageio 2.eq3.19.0

CPE	Name	Operator	Version
	openimageio openimageio 2.	eq	3.19.0

0.002 Low

EPSS

Percentile

56.5%

JSON

Related for CNVD-2023-01798