rpm package
opensuse/OpenImageIO&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/OpenImageIO&distro=openSUSE%20Tumbleweed
Vulnerabilities (32)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-43594 | Med | 5.9 | < 2.4.6.0-1.1 | 2.4.6.0-1.1 | Dec 22, 2022 | Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigg | |
| CVE-2022-43593 | Med | 5.9 | < 2.4.6.0-1.1 | 2.4.6.0-1.1 | Dec 22, 2022 | A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to null pointer dereference. An attacker can provide malicious input to trigger this vulnerability. | |
| CVE-2022-43592 | Med | 5.9 | < 2.4.6.0-1.1 | 2.4.6.0-1.1 | Dec 22, 2022 | An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability. | |
| CVE-2022-41999 | Hig | 7.5 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-crafted .dds can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability. | |
| CVE-2022-41988 | Hig | 7.5 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger th | |
| CVE-2022-41977 | Low | 3.3 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability. | |
| CVE-2022-41838 | Cri | 9.8 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. | |
| CVE-2022-41794 | Cri | 9.8 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. | |
| CVE-2022-41684 | Med | 5.5 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can | |
| CVE-2022-41639 | Cri | 9.8 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacke | |
| CVE-2022-38143 | Cri | 9.8 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to tri | |
| CVE-2022-36354 | Med | 5.3 | < 2.4.5.0-1.1 | 2.4.5.0-1.1 | Dec 22, 2022 | A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can |
- affected < 2.4.6.0-1.1fixed 2.4.6.0-1.1
Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigg
- affected < 2.4.6.0-1.1fixed 2.4.6.0-1.1
A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to null pointer dereference. An attacker can provide malicious input to trigger this vulnerability.
- affected < 2.4.6.0-1.1fixed 2.4.6.0-1.1
An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-crafted .dds can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger th
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacke
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to tri
- affected < 2.4.5.0-1.1fixed 2.4.5.0-1.1
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can
Page 2 of 2