Astra Linux – Vulnerability in openimageio

A out-of-bounds write vulnerability exists in the OpenImageIO::addexifitemtospec functionality of the OpenImageIO Project, OpenImageIO v2.4.4.2. Specially crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability...

The vulnerability of the Gstreamer multimedia framework, related to integer overflow, allows an attacker to execute arbitrary code.

The vulnerability of the Gstreamer multimedia framework is related to a potential overflow condition during the processing of EXIF metadata files. Exploiting this vulnerability could allow an attacker to execute arbitrary code...