Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-24473

Опубликовано: 30 мар. 2023
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:openimageio:openimageio:2.4.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 27%
0.00096
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

ubuntu логотип

CVE-2023-24473

CVSS3: 5.3
ubuntu
почти 3 года назад

An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

debian логотип

CVE-2023-24473

CVSS3: 5.3
debian
почти 3 года назад

An information disclosure vulnerability exists in the TGAInput::read_t ...

github логотип

GHSA-9r8p-967f-crjr

CVSS3: 7.5
github
почти 3 года назад

An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

EPSS

Процентиль: 27%
0.00096
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-125