Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-41684
HistoryDec 22, 2022 - 10:15 p.m.

Heap overflow

2022-12-2222:15:00
PRIOn knowledge base
www.prio-n.com
9
heap overflow
openimageio
psd parser
denial of service
vulnerability
memory address
malicious file

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.

CPENameOperatorVersion
openimageioeq2022914.0.0

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%