Astra Linux – Vulnerability in openimageio

There is an information disclosure vulnerability in the OpenImageIO::decodeiptciim function of the OpenImageIO Project, version 2.3.19.0. A specially crafted TIFF file can lead to the disclosure of sensitive information. An attacker can provide a malicious file that triggers this vulnerability...

OpenImageIO decode_iptc_iim() Confidential Data

The vulnerability of the decodeiptciim function in the OpenImageIO image processing library is related to reading data from within the allowable buffer limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created TIFF file...

CVE-2022-41988

An information disclosure vulnerability exists in the OpenImageIO::decodeiptciim functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2022-41988: Out-of-bounds Read

An information disclosure vulnerability exists in the OpenImageIO::decodeiptciim functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability...