OpenImageIO vulnerabilities
We track 6 vulnerabilities in OpenImageIO products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2023.
Latest OpenImageIO vulnerabilities
- 7.5 High severity
OpenImageIO: Out-of-bounds Write
A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and coul
- 9.8 Critical severity
Openimageio: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_subimage_data function.
- 8.8 High severity
Openimageio: Integer Overflow or Wraparound
An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c
- 7.8 High severity
Openimageio: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain sensitive information via a crafted file to the readimg function.
- 7.5 High severity
OpenImageIO: Out-of-bounds Read
An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious fi
- 7.5 High severity
OpenImageIO: Out-of-bounds Read
An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vu