rpm package
opensuse/OpenImageIO&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/OpenImageIO&distro=openSUSE%20Tumbleweed
Vulnerabilities (24)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-41684 | — | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 23, 2022 | A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can | ||
| CVE-2022-41639 | — | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 23, 2022 | A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacke | ||
| CVE-2022-38143 | — | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 23, 2022 | A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to tri | ||
| CVE-2022-36354 | — | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 23, 2022 | A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can |
- CVE-2022-41684Dec 23, 2022affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can
- CVE-2022-41639Dec 23, 2022affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacke
- CVE-2022-38143Dec 23, 2022affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to tri
- CVE-2022-36354Dec 23, 2022affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can
Page 2 of 2