Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-55387
HistoryDec 23, 2022 - 12:00 a.m.

OpenImageIO Information Disclosure Vulnerability (CNVD-2023-55387)

2022-12-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
openimageio
vulnerability
information disclosure
out-of-bounds read
dpxoutput
attacker
sensitive information

EPSS

0.002

Percentile

52.7%

OpenImageIO is an image read/write library, along with a number of tools and applications. OpenImageIO suffers from an information disclosure vulnerability that is caused by an out-of-bounds read flaw in the DPXOutput::close() function. An attacker can exploit this vulnerability to obtain sensitive information.