Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2hg4-4q69-pf8q

Опубликовано: 23 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 41%
0.00191
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-562
CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 3 лет назад

An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
nvd
около 3 лет назад

An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
debian
около 3 лет назад

An out-of-bounds write vulnerability exists in the OpenImageIO::add_ex ...

CVSS3: 9.8
fstec
больше 3 лет назад

Уязвимость функции add_exif_item_to_spec компонента src/libOpenImageIO/exif.cpp библиотеки обработки изображений OpenImageIO, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 41%
0.00191
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-562
CWE-787