CVE-2022-41988
- EPSS 0.15%
- Veröffentlicht 22.12.2022 22:15:15
- Zuletzt bearbeitet 21.11.2024 07:24:13
An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide ...
CVE-2022-41684
- EPSS 0.06%
- Veröffentlicht 22.12.2022 22:15:14
- Zuletzt bearbeitet 21.11.2024 07:23:38
A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to deni...
CVE-2022-41649
- EPSS 0.15%
- Veröffentlicht 22.12.2022 22:15:14
- Zuletzt bearbeitet 21.11.2024 07:23:33
A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An a...
CVE-2022-41639
- EPSS 0.32%
- Veröffentlicht 22.12.2022 22:15:14
- Zuletzt bearbeitet 21.11.2024 07:23:32
A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitr...
CVE-2022-36354
- EPSS 0.09%
- Veröffentlicht 22.12.2022 22:15:13
- Zuletzt bearbeitet 21.11.2024 07:12:51
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds re...
CVE-2022-38143
- EPSS 0.36%
- Veröffentlicht 22.12.2022 22:15:13
- Zuletzt bearbeitet 21.11.2024 07:15:52
A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can p...