Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-41684

Опубликовано: 22 дек. 2022
Источник: nvd
CVSS3: 7.5
CVSS3: 5.5
EPSS Низкий

Описание

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openimageio:openimageio:2022-09-14:*:*:*:*:*:*:*

EPSS

Процентиль: 24%
0.0008
Низкий

7.5 High

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-125
CWE-125

Связанные уязвимости

CVSS3: 5.5
ubuntu
около 3 лет назад

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 5.5
debian
около 3 лет назад

A heap out of bounds read vulnerability exists in the OpenImageIO mast ...

CVSS3: 5.5
github
около 3 лет назад

A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
fstec
больше 3 лет назад

Уязвимость библиотеки обработки изображений OpenImageIO, связанная с чтением за допустимыми границами буфера данных, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 24%
0.0008
Низкий

7.5 High

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-125
CWE-125