Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-41649
HistoryDec 22, 2022 - 10:15 p.m.

Heap overflow

2022-12-2222:15:00
PRIOn knowledge base
www.prio-n.com
8
heap overflow
iptc data handling
tiff images
openimageio v2.3.19.0
vulnerability
memory leak
specially-crafted file
attack vector

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger this vulnerability.

CPENameOperatorVersion
debian_linuxeq11.0
openimageioeq2.3.19.0

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%