OpenImageIO 缓冲区错误漏洞

OpenImageIO is an image read/write library, along with a number of tools and applications. OpenImageIO suffers from an information disclosure vulnerability that is caused by an out-of-bounds read flaw in the DPXOutput::close function. An attacker can exploit this vulnerability to obtain sensitive...

OpenImageIO 代码问题漏洞

OpenImageIO is OpenImageIO open source an image processing library . With an easy-to-use interface and a large number of supported image formats. OpenImageIO v2.4.4.2 version of the code problem vulnerability , the vulnerability stems from its image output closing function allows attackers to...

OpenImageIO 代码问题漏洞

OpenImageIO is OpenImageIO open source an image processing library . With an easy to use interface and a large number of supported image formats. OpenImageIO v2.4.4.2 version of the code problem vulnerability , the vulnerability stems from its DPXOutput::close function allows attackers to achieve...

OpenImageIO 缓冲区错误漏洞

OpenImageIO is an image read and write library that also provides several tools and applications. A stack buffer overflow vulnerability exists in the TGA file format parser in OpenImageIO v2.3.19.0. An attacker could exploit this vulnerability to cause out-of-bounds writes and arbitrary code...

OpenImageIO DDS native tile reading denial of service vulnerability

Talos Vulnerability Report TALOS-2022-1635 OpenImageIO DDS native tile reading denial of service vulnerability December 22, 2022 CVE Number CVE-2022-41999 SUMMARY A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and...

OpenImageIO Project OpenImageIO IFFOutput channel interleaving information disclosure vulnerability

Talos Vulnerability Report TALOS-2022-1654 OpenImageIO Project OpenImageIO IFFOutput channel interleaving information disclosure vulnerability December 22, 2022 CVE Number CVE-2022-43596 SUMMARY An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of...

OpenImageIO TIFF IPTC decoding information disclosure vulnerability

Talos Vulnerability Report TALOS-2022-1643 OpenImageIO TIFF IPTC decoding information disclosure vulnerability December 22, 2022 CVE Number CVE-2022-41988 SUMMARY An information disclosure vulnerability exists in the OpenImageIO::decodeiptciim functionality of OpenImageIO Project OpenImageIO...

PT-2022-6816 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.4.4.2 Description: The issue is related to a buffer overflow in the close function of the iffoutput component in the OpenImageIO library. This can be exploited by a remote attacker using a specially crafted file,...

PT-2022-6814 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.4.4.2 Description: Multiple code execution vulnerabilities exist in the IFFOutput::close functionality of OpenImageIO. A specially crafted ImageOutput Object can lead to a heap buffer overflow. This issue arises when the...

PT-2022-6815 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.4.4.2 Description: Multiple code execution vulnerabilities exist in the IFFOutput::close functionality. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input t...

PT-2022-6812 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions 2.4.4.2 Description: The issue is related to a memory buffer overflow in the IFFOutput component of the OpenImageIO library. This can allow a remote attacker to access confidential data, compromise its integrity, and caus...

PT-2022-7117 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions prior to the fixed version Description: The issue is related to the add exif item to spec function in the OpenImageIO library, which can lead to stack-based memory corruption when processing specially-crafted exif metadat...

PT-2022-6803 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.3.19.0 Description: An information disclosure issue exists in the OpenImageIO::decode iptc iim functionality. This is related to reading beyond the valid boundaries of a data buffer. A specially-crafted TIFF file can lea...

PT-2022-6799 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions master-branch-9aeece7a through v2.3.19.0 Description: A heap-based buffer overflow vulnerability exists in the tile decoding code of the TIFF image parser. This issue can be triggered by a specially-crafted TIFF file,...

PT-2022-6795 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO versions prior to v2.3.20 OpenImageIO master-branch-9aeece7a and v2.3.19.0 Description: A heap out-of-bounds read issue exists in the RLA format parser of OpenImageIO, specifically in the handling of run-length encoded byte spans...

PT-2022-6801 · Unknown +2 · Openimageio +2

Name of the Vulnerable Software and Affected Versions: OpenImageIO version v2.3.19.0 Description: An out of bounds read issue exists in the way OpenImageIO processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a...

PT-2022-6802 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.3.19.0 Description: The issue is related to a stack-based buffer overflow vulnerability in the TGA file format parser of OpenImageIO. This vulnerability can be exploited by a remote attacker using a specially crafted tar...

PT-2022-7113 · Unknown +1 · Openimageio +1

Name of the Vulnerable Software and Affected Versions: OpenImageIO version 2.3.19.0 Description: A heap out of bounds read issue exists in the handling of IPTC data while parsing TIFF images. This can be triggered by a specially-crafted TIFF file, causing a read of adjacent heap memory and...

Fedora: Security Advisory for OpenImageIO (FEDORA-2022-d9f1bb102d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for OpenImageIO (FEDORA-2022-eaeeb0ca2b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...