Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-55385
HistoryDec 23, 2022 - 12:00 a.m.

OpenImageIO Information Disclosure Vulnerability

2022-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
openimageio
information disclosure
vulnerability
flaw
iffoutput
channel
interleaving
exploit
sensitive information
cnvd

0.001 Low

EPSS

Percentile

50.3%

OpenImageIO is an image read/write library, along with a number of tools and applications. OpenImageIO suffers from an information disclosure vulnerability that is caused by a flaw in the IFFOutput channel interleaving function. An attacker can exploit this vulnerability to obtain sensitive information.

CPENameOperatorVersion
openimageio openimageio 2.eq4.4.2