Lucene search
China National Vulnerability DatabaseCNVD-2023-55386HistoryDec 23, 2022 - 12:00 a.m.
OpenImageIO Information Disclosure Vulnerability (CNVD-2023-55386)
2022-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
openimageio library
information disclosure
vulnerability
out-of-bounds read
exploit
sensitive information
0.001 Low
EPSS
Percentile
50.4%
OpenImageIO is an image read/write library, along with a number of tools and applications. OpenImageIO suffers from an information disclosure vulnerability caused by an out-of-bounds read flaw in the OpenImageIO::decode_iptc_iim() function. An attacker can exploit this vulnerability to obtain sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openimageio openimageio 2. | eq | 3.19.0 |
Related
debiancve
debiancve
CVE-2022-41988
2022-12-22 22:15:15
nvd
nvd
CVE-2022-41988
2022-12-22 22:15:15
osv
osv
CVE-2022-41988
2022-12-22 22:15:15
openimageio - security update
2023-04-05 00:00:00
openimageio - security update
2023-04-10 00:00:00
cve
cve
CVE-2022-41988
2022-12-22 22:15:15
prion
prion
Information disclosure
2022-12-22 22:15:00
ubuntucve
ubuntucve
CVE-2022-41988
2022-12-22 00:00:00
cvelist
cvelist
CVE-2022-41988
2022-12-22 00:00:00
talos
talos
OpenImageIO TIFF IPTC decoding information disclosure vulnerability
2022-12-22 00:00:00
fedora
fedora
[SECURITY] Fedora 36 Update: OpenImageIO-2.3.21.0-1.fc36
2022-12-31 01:17:01
openvas
openvas
Fedora: Security Advisory for OpenImageIO (FEDORA-2022-e63bc3eca2)
2022-12-31 00:00:00
Debian: Security Advisory (DLA-3382-1)
2023-04-11 00:00:00
Debian: Security Advisory (DSA-5384-1)
2023-04-11 00:00:00
nessus
nessus
Fedora 36 : OpenImageIO (2022-e63bc3eca2)
2022-12-31 00:00:00
Debian DLA-3382-1 : openimageio - LTS security update
2023-04-10 00:00:00
Debian DSA-5384-1 : openimageio - security update
2023-04-11 00:00:00
debian
debian
[SECURITY] [DLA 3382-1] openimageio security update
2023-04-04 23:34:51
[SECURITY] [DSA 5384-1] openimageio security update
2023-04-10 09:18:20
talosblog
talosblog
mageia
mageia
Updated openimageio packages fix security vulnerability
2023-04-24 03:20:26
gentoo
gentoo
OpenImageIO: Multiple Vulnerabilities
2023-05-30 00:00:00