Lucene search

PRIOn knowledge basePRION:CVE-2022-41981

HistoryDec 22, 2022 - 10:15 p.m.

Stack overflow

2022-12-2222:15:00

PRIOn knowledge base

www.prio-n.com

buffer overflow

openimageio

tga file format

arbitrary code execution

vulnerability

out of bounds access

malicious file

nvd

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.5%

JSON

A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CPENameOperatorVersion
debian_linuxeq11.0
openimageioeq2.3.19.0

CPE	Name	Operator	Version
	debian_linux	eq	11.0
	openimageio	eq	2.3.19.0

References

talosintelligence.com/vulnerability_reports/TALOS-2022-1628