CVE-2022-43598
- EPSS 0.44%
- Veröffentlicht 22.12.2022 22:15:16
- Zuletzt bearbeitet 21.11.2024 07:26:51
Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malici...
CVE-2022-43599
- EPSS 0.71%
- Veröffentlicht 22.12.2022 22:15:16
- Zuletzt bearbeitet 21.11.2024 07:26:51
Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to t...
CVE-2022-43600
- EPSS 0.77%
- Veröffentlicht 22.12.2022 22:15:16
- Zuletzt bearbeitet 21.11.2024 07:26:51
Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to t...
CVE-2022-41988
- EPSS 0.29%
- Veröffentlicht 22.12.2022 22:15:15
- Zuletzt bearbeitet 21.11.2024 07:24:13
An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide ...
CVE-2022-41981
- EPSS 0.37%
- Veröffentlicht 22.12.2022 22:15:15
- Zuletzt bearbeitet 21.11.2024 07:24:12
A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to arbitrary code execution. An at...
CVE-2022-41977
- EPSS 0.11%
- Veröffentlicht 22.12.2022 22:15:15
- Zuletzt bearbeitet 21.11.2024 07:24:11
An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger thi...
CVE-2022-41838
- EPSS 0.99%
- Veröffentlicht 22.12.2022 22:15:15
- Zuletzt bearbeitet 21.11.2024 07:23:54
A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnera...
CVE-2022-41837
- EPSS 0.25%
- Veröffentlicht 22.12.2022 22:15:15
- Zuletzt bearbeitet 21.11.2024 07:23:54
An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a mali...
CVE-2022-41794
- EPSS 0.85%
- Veröffentlicht 22.12.2022 22:15:15
- Zuletzt bearbeitet 21.11.2024 07:23:51
A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerab...
CVE-2022-41684
- EPSS 0.08%
- Veröffentlicht 22.12.2022 22:15:14
- Zuletzt bearbeitet 21.11.2024 07:23:38
A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to deni...