Lucene search

K
osvGoogleOSV:CVE-2022-41649
HistoryDec 22, 2022 - 10:15 p.m.

CVE-2022-41649

2022-12-2222:15:14
Google
osv.dev
7
heap memory leak
iptc data
tiff images
openimageio
vulnerability
sensitive information

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger this vulnerability.

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%