CVE-2024-55195

EPSS 0.07%
Published 23.01.2025 22:15:14
Last modified 28.01.2025 15:15:12
Source cve@mitre.org
Teams watchlist Login
Open Login

An allocation-size-too-big bug in the component /imagebuf.cpp of OpenImageIO v3.1.0.0dev may cause a Denial of Service (DoS) when the program to requests to allocate too much space.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.07%	0.23

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4553

https://nvd.nist.gov/vuln/detail/CVE-2024-55195

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-55195

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-55195

EUVD