1060 matches found
PT-2025-3097
Name of the Vulnerable Software and Affected Versions OpenImageIO version 3.1.0.0dev Description A heap overflow issue was discovered in OpenImageIO via the component OpenImageIO v3 1 0::farmhash::inlined::Fetch64char const. Recommendations For OpenImageIO version 3.1.0.0dev, as a temporary...
Fedora 37 : OpenImageIO (2022-fc361cc7b6)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-fc361cc7b6 advisory. Update to 2.4.6.1, see release notes for details: https://github.com/OpenImageIO/oiio/releases Security fix for Tenable has extracted the preceding...
Fedora 37 : OpenImageIO / ctk / dcmtk (2022-73bf8ee661)
The remote Fedora 37 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2022-73bf8ee661 advisory. Security fix for CVE-2021-41688, CVE-2021-41690, CVE-2021-41687, CVE-2021-41689 Tenable has extracted the preceding description block directly from...
OPENSUSE-SU-2024:14200-1 OpenImageIO-2.5.13.1-1.1 on GA media
These are all security issues fixed in the OpenImageIO-2.5.13.1-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE CVE-2024-40630
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
Out-of-bounds Read
OpenImageIO is vulnerable to Out-of-bounds Read. The vulnerability is due to a bug in the heif input functionality, specifically in HeifInput::seeksubimage, which can potentially lead to information disclosure when using the ImageInput APIs...
CVE-2024-40630
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
DEBIAN-CVE-2024-40630
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
CVE-2024-40630
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
CVE-2024-40630
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
CVE-2024-40630
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
CVE-2024-40630 HEIF Heap OOB Read in OpenImageIO
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
CVE-2024-40630
OpenImageIO (OIIO) OpenImageIO’s HEIF input path contains a bug in HeifInput::seek_subimage() that can lead to information disclosure in affected builds. The issue is documented as part of CVE-2024-40630; remediation is to upgrade to OpenImageIO 2.5.13.1 or later, where the patch (commit 0a2dcb4c...
CVE-2024-40630: Out-of-bounds Read
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation via a format-agnostic API with a feature set, scalability, and robustness needed for feature film production. In affected versions there is a bug in the heif input...
PT-2024-28952
Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to 2.5.13.1 Description The issue is related to a bug in the heif input functionality of OpenImageIO, specifically in the HeifInput::seek subimage function. This bug can lead to an information disclosure issue,...
OPENSUSE-SU-2024:12693-1 OpenImageIO-2.4.8.1-1.1 on GA media
These are all security issues fixed in the OpenImageIO-2.4.8.1-1.1 package on the GA media of openSUSE Tumbleweed...