Vulnerabilidades em OpenImageIO Project
27 resultadosAnálise Vexday
O OpenImageIO Project apresenta 27 vulnerabilidades catalogadas, com 5 delas críticas, predominantemente ligadas a estouro de buffer (CWE-122). Nenhuma vulnerabilidade está sob exploração ativa confirmada nem houve publicações recentes nos últimos 90 dias, indicando risco moderado e estável.
CVE-2022-43592MEDIUMAn information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A speciaEPSS 1.1%CVE-2022-41981HIGHA stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file caEPSS 1.0%CVE-2023-22845HIGHAn out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specEPSS 0.9%CVE-2023-24473MEDIUMAn information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. EPSS 0.9%CVE-2022-36354MEDIUMA heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specificalEPSS 0.8%CVE-2022-41684HIGHA heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSDEPSS 0.8%CVE-2022-41977MEDIUMAn out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A speciallyEPSS 0.7%