Lucene search
K

816 matches found

SUSE CVE
SUSE CVE
added 2024/07/17 3:33 a.m.1 views

SUSE CVE-2024-40630

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

4.3CVSS6.3AI score0.00257EPSS
Exploits0References3
Veracode
Veracode
added 2024/07/16 2:28 p.m.12 views

Out-of-bounds Read

OpenImageIO is vulnerable to Out-of-bounds Read. The vulnerability is due to a bug in the heif input functionality, specifically in HeifInput::seeksubimage, which can potentially lead to information disclosure when using the ImageInput APIs...

4.3CVSS6.2AI score0.00257EPSS
Exploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2024/07/15 8:15 p.m.16 views

CVE-2024-40630

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

6.5AI score0.00257EPSS
Exploits0
NVD
NVD
added 2024/07/15 8:15 p.m.21 views

CVE-2024-40630

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

4.3CVSS0.00257EPSS
Exploits0References3
OSV
OSV
added 2024/07/15 8:15 p.m.1 views

DEBIAN-CVE-2024-40630

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

4.3CVSS5.2AI score0.00257EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2024/07/15 8:15 p.m.9 views

CVE-2024-40630

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

4.3CVSS5.7AI score0.00257EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/07/15 7:15 p.m.17 views

CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

4.3CVSS0.00257EPSS
Exploits0References3
OSV
OSV
added 2024/07/15 7:15 p.m.16 views

CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

4.3CVSS5.9AI score0.00257EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2024/07/15 7:15 p.m.11 views

CVE-2024-40630

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

4.3CVSS5.2AI score0.00257EPSS
Exploits0
CVE
CVE
added 2024/07/15 7:15 p.m.82 views

CVE-2024-40630

OpenImageIO (OIIO) OpenImageIO’s HEIF input path contains a bug in HeifInput::seek_subimage() that can lead to information disclosure in affected builds. The issue is documented as part of CVE-2024-40630; remediation is to upgrade to OpenImageIO 2.5.13.1 or later, where the patch (commit 0a2dcb4c...

4.3CVSS4.2AI score0.00257EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/07/15 7:15 p.m.17 views

CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...

4.3CVSS6.4AI score0.00257EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/07/15 12:0 a.m.2 views

PT-2024-28952 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions prior to 2.5.13.1 Description: The issue is related to a bug in the heif input functionality of OpenImageIO, specifically in the HeifInput::seek subimage function. This bug can lead to an information disclosure issue,...

4.3CVSS6.4AI score0.00257EPSS
Exploits0References15
OSV
OSV
added 2024/06/15 12:0 a.m.21 views

OPENSUSE-SU-2024:12589-1 OpenImageIO-2.4.6.0-1.1 on GA media

These are all security issues fixed in the OpenImageIO-2.4.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

8.1CVSS6.2AI score0.0172EPSS
Exploits8References8
OSV
OSV
added 2024/06/15 12:0 a.m.21 views

OPENSUSE-SU-2024:12477-1 OpenImageIO-2.4.5.0-1.1 on GA media

These are all security issues fixed in the OpenImageIO-2.4.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

9.8CVSS7AI score0.05976EPSS
Exploits11References10
OSV
OSV
added 2024/06/15 12:0 a.m.12 views

OPENSUSE-SU-2024:12693-1 OpenImageIO-2.4.8.1-1.1 on GA media

These are all security issues fixed in the OpenImageIO-2.4.8.1-1.1 package on the GA media of openSUSE Tumbleweed...

7.5CVSS6.3AI score0.00235EPSS
Exploits3References3
BDU FSTEC
BDU FSTEC
added 2024/04/09 12:0 a.m.1 views

The vulnerability in the file src/gif.imageio/gifinput.cpp of the OpenImageIO image processing library allows a attacker to cause a service failure.

The vulnerability in the src/gif.imageio/gifinput.cpp file of the OpenImageIO library relates to the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

7.8CVSS7.4AI score0.0051EPSS
Exploits1References7Affected Software4
Redos
Redos
added 2024/04/08 12:0 a.m.26 views

ROS-20240408-12

Vulnerability in src/gif.imageio/gifinput.cpp file of OpenImageIO image processing library is related to the ability to write beyond buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

7.5CVSS6.9AI score0.0051EPSS
Exploits1
NVD
NVD
added 2023/12/18 2:15 p.m.13 views

CVE-2023-3430

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial ...

7.5CVSS0.0051EPSS
Exploits1References2
OSV
OSV
added 2023/12/18 2:15 p.m.1 views

DEBIAN-CVE-2023-3430

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial ...

7.5CVSS7.6AI score0.0051EPSS
Exploits1References1
OSV
OSV
added 2023/12/18 2:15 p.m.4 views

CVE-2023-3430

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial ...

7.5CVSS7AI score
Exploits0References2
Rows per page
Query Builder