Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-43596
HistoryDec 22, 2022 - 10:15 p.m.

Information disclosure

2022-12-2222:15:00
PRIOn knowledge base
www.prio-n.com
5
information disclosure
openimageio
iffoutput
interleaving functionality
vulnerability
heap data
attacker
malicious input

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.

CPENameOperatorVersion
debian_linuxeq11.0
openimageioeq2.4.4.2

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%