Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-24473
5.3
MEDIUMCVSS v3
Severity scale
010
Description
An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.
AcademySoftwareFoundation/OpenImageIO
GitHubReading, writing, and processing images in a wide variety of file formats, using a format-agnostic API, aimed at VFX applications.
GitHubReading, writing, and processing images in a wide variety of file formats, using a format-agnostic API, aimed at VFX applications.= 2.4.7.1NVD