Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-74vr-xvvm-6f75

Опубликовано: 23 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger this vulnerability.

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 40%
0.00183
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 9.1
ubuntu
около 3 лет назад

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.1
nvd
около 3 лет назад

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. A specially-crafted TIFF file can cause a read of adjacent heap memory, which can leak sensitive process information. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.1
debian
около 3 лет назад

A heap out of bounds read vulnerability exists in the handling of IPTC ...

CVSS3: 7.5
fstec
больше 3 лет назад

Уязвимость библиотеки обработки изображений OpenImageIO, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю получить доступ к конфиденциальным данным

EPSS

Процентиль: 40%
0.00183
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125