Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-55383
HistoryDec 23, 2022 - 12:00 a.m.

OpenImageIO Out-of-Bounds Write Vulnerability

2022-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
openimageio
out-of-bounds write
vulnerability
image library
arbitrary code
denial of service

0.001 Low

EPSS

Percentile

44.8%

OpenImageIO is an image read/write library, along with a number of tools and applications. OpenImageIO suffers from an out-of-bounds write vulnerability, which is caused by an out-of-bounds write flaw in the OpenImageIO::add_exix_item_to_spec function. An attacker could use this vulnerability to execute arbitrary code or cause a denial of service condition on the system.

CPENameOperatorVersion
openimageio openimageio 2.eq4.4.2