Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-41649
9.1
CRITICALCVSS v3
Severity scale
010
Description
A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger this vulnerability.
AcademySoftwareFoundation/OpenImageIO
GitHubReading, writing, and processing images in a wide variety of file formats, using a format-agnostic API, aimed at VFX applications.
GitHubReading, writing, and processing images in a wide variety of file formats, using a format-agnostic API, aimed at VFX applications.= 2.3.19.0NVD