[SECURITY] [DSA 5384-1] openimageio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5384-1 [email protected] https://www.debian.org/security/ Markus Koschany April 10, 2023 https://www.debian.org/security/faq -...

CVE-2022-41649

CVE-2022-41649 is a heap out-of-bounds read in OpenImageIO’s handling of IPTC data when parsing TIFF images in v2.3.19.0, enabling potential information disclosure via a malicious TIFF file. Connected advisories confirm affected OpenImageIO versions and recommend upgrading; GLSA-202305-33 suggest...

CVE-2022-41649

creationtimestamp| type| source ---|---|--- 2022-12-23 00:14:07+00:00| seen| https://t.me/cibsecurity/55202 2022-12-23 11:20:27+00:00| seen| https://t.me/truesecator/3869...

CVE-2022-41649

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger...

OpenImageIO TIFF file IPTC data information disclosure vulnerability

Talos Vulnerability Report TALOS-2022-1631 OpenImageIO TIFF file IPTC data information disclosure vulnerability December 22, 2022 CVE Number CVE-2022-41649 SUMMARY A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A...