Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q39q-7726-rg48

Опубликовано: 23 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 68%
0.00584
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-123
CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 3 лет назад

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
nvd
около 3 лет назад

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
debian
около 3 лет назад

A heap out-of-bounds write vulnerability exists in the way OpenImageIO ...

EPSS

Процентиль: 68%
0.00584
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-123
CWE-787