[SECURITY] [DSA 5384-1] openimageio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5384-1 [email protected] https://www.debian.org/security/ Markus Koschany April 10, 2023 https://www.debian.org/security/faq -...

CVE-2022-43600

OpenImageIO CVE-2022-43600 affects OpenImageIO v2.4.4.2. The issue is in IFFOutput::close() where xmax=0xFFFF and TypeDesc::UINT16 can trigger a heap buffer overflow, potentially leading to denial of service or arbitrary code execution. Debian and GLSA advisories also reference related OpenImageI...

OpenImageIO Project OpenImageIO IFFOutput wild write vulnerability

Talos Vulnerability Report TALOS-2022-1656 OpenImageIO Project OpenImageIO IFFOutput wild write vulnerability December 22, 2022 CVE Number CVE-2022-43601,CVE-2022-43600,CVE-2022-43599,CVE-2022-43602 SUMMARY Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of...