[SECURITY] [DSA 5384-1] openimageio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5384-1 [email protected] https://www.debian.org/security/ Markus Koschany April 10, 2023 https://www.debian.org/security/faq -...

CVE-2022-43599

OpenImageIO CVE-2022-43599 affects OpenImageIO v2.4.4.2, where the IFFOutput::close() path can trigger a heap buffer overflow when xmax is 0xFFFF and m_spec.format is TypeDesc::UINT8. Connected advisories (GLSA 202305-33, Debian DSA-5384, Debian DLA-3382) describe this family of OpenImageIO vulne...

CVE-2022-43599

Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability...

CVE-2022-43599

creationtimestamp| type| source ---|---|--- 2022-12-23 00:14:25+00:00| seen| https://t.me/cibsecurity/55214 2022-12-23 11:20:27+00:00| seen| https://t.me/truesecator/3869...

OpenImageIO Project OpenImageIO IFFOutput wild write vulnerability

Talos Vulnerability Report TALOS-2022-1656 OpenImageIO Project OpenImageIO IFFOutput wild write vulnerability December 22, 2022 CVE Number CVE-2022-43601,CVE-2022-43600,CVE-2022-43599,CVE-2022-43602 SUMMARY Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of...