CVE-2024-55192

Опубликовано: 23 янв. 2025

Источник: debian

EPSS Низкий

Описание

OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).

Пакеты

Пакет	Статус	Релиз	Тип
openimageio	unfixed		package
openimageio	no-dsa	trixie	package
openimageio	no-dsa	bookworm	package
openimageio	ignored	bullseye	package

Примечания

https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4550
https://github.com/AcademySoftwareFoundation/OpenImageIO/commit/57de4554d119a9adab8ef5c51ff7841fb6f97041

EPSS

Процентиль: 55%

0.00319

Низкий

Связанные уязвимости

CVE-2024-55192

CVSS3: 9.8

ubuntu

около 1 года назад

OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).

CVE-2024-55192

CVSS3: 9.8

nvd

около 1 года назад

OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).

GHSA-m3pc-rgm4-56jw

CVSS3: 9.8

github

около 1 года назад

OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).

BDU:2025-02450

CVSS3: 9.8

fstec

около 1 года назад

Уязвимость файла src/include/OpenImageIO/detail/farmhash.h библиотеки обработки изображений OpenImageIO, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 55%

0.00319

Низкий