PT-2022-6813

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description Multiple code execution vulnerabilities exist in the IFFOutput::close functionality. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to...

PT-2022-6817

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description A denial of service issue exists in the ZfileOutput::close functionality of OpenImageIO. This can be triggered by a specially crafted ImageOutput Object, allowing an attacker to cause a denial of service...

PT-2022-6808

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description The issue is related to denial of service vulnerabilities in the image output closing functionality. Specially crafted ImageOutput Objects can lead to null pointer dereferences. An attacker can trigger...

PT-2022-6806

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description An information disclosure issue exists in the DPXOutput::close functionality. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this...

PT-2022-6807

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description A denial of service issue exists in the DPXOutput::close functionality of OpenImageIO. This is due to errors in pointer dereferencing. An attacker can trigger this issue by providing malicious input,...

PT-2022-6816 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.4.4.2 Description: The issue is related to a buffer overflow in the close function of the iffoutput component in the OpenImageIO library. This can be exploited by a remote attacker using a specially crafted file,...

PT-2022-7116

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.3.19.0 Description A heap-based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code. This issue can be triggered by a specially-crafted PSD file, potentially leading to arbitrary code execution...

PT-2022-6802 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.3.19.0 Description: The issue is related to a stack-based buffer overflow vulnerability in the TGA file format parser of OpenImageIO. This vulnerability can be exploited by a remote attacker using a specially crafted tar...

PT-2022-7113 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.3.19.0 Description: A heap out of bounds read issue exists in the handling of IPTC data while parsing TIFF images. This can be triggered by a specially-crafted TIFF file, causing a read of adjacent heap memory and...

PT-2022-7117 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions prior to the fixed version Description: The issue is related to the add exif item to spec function in the OpenImageIO library, which can lead to stack-based memory corruption when processing specially-crafted exif metadat...

PT-2022-6804

Name of the Vulnerable Software and Affected Versions OpenImageIO versions 2.3.19.0 through 2.4.4.2 Description A denial of service issue exists in the DDS native tile reading functionality. This can be triggered by a specially-crafted .dds file, allowing an attacker to cause a denial of service...

PT-2022-7115

Name of the Vulnerable Software and Affected Versions OpenImageIO master-branch-9aeece7a Description The issue is related to a heap out of bounds read vulnerability in OpenImageIO when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of...

PT-2022-6795 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions prior to v2.3.20 OpenImageIO master-branch-9aeece7a and v2.3.19.0 Description: A heap out-of-bounds read issue exists in the RLA format parser of OpenImageIO, specifically in the handling of run-length encoded byte spans...

PT-2022-6799 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions master-branch-9aeece7a through v2.3.19.0 Description: A heap-based buffer overflow vulnerability exists in the tile decoding code of the TIFF image parser. This issue can be triggered by a specially-crafted TIFF file,...

PT-2022-6803 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.3.19.0 Description: An information disclosure issue exists in the OpenImageIO::decode iptc iim functionality. This is related to reading beyond the valid boundaries of a data buffer. A specially-crafted TIFF file can lea...

PT-2022-6801 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO version v2.3.19.0 Description: An out of bounds read issue exists in the way OpenImageIO processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a...

PT-2022-6800

Name of the Vulnerable Software and Affected Versions OpenImageIO version 2.4.4.2 Description A code execution issue exists in the DDS scanline parsing functionality, which can lead to a heap buffer overflow when a specially-crafted .dds file is provided. This can allow an attacker to trigger the...

Fedora: Security Advisory for OpenImageIO (FEDORA-2022-eaeeb0ca2b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for OpenImageIO (FEDORA-2022-d9f1bb102d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: OpenImageIO-2.3.18.0-2.fc36

OpenImageIO is a library for reading and writing images, and a bunch of relat ed classes, utilities, and applications. Main features include: - Extremely simple but powerful ImageInput and ImageOutput APIs for reading a nd writing 2D images that is format agnostic. - Format plugins for TIFF,...