Поиск уязвимостей
Количество 7
Количество 7
CVE-2022-36354
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-36354
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2022-36354
A heap out-of-bounds read vulnerability exists in the RLA format parse ...
GHSA-fchc-223x-3cpc
A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.
BDU:2023-04789
Уязвимость библиотеки обработки изображений OpenImageIO, связанная с ошибкой единичного смещения, позволяющая нарушителю получить доступ к конфиденциальным данным
ALT-PU-2025-6890
ALT-PU-2025-6890: package `libopenimageio` update to version 2.3.21.0-alt1
ALT-PU-2022-3225
ALT-PU-2022-3225: package `libopenimageio` update to version 2.3.21.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-36354 A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability. | CVSS3: 5.3 | 1% Низкий | почти 4 года назад |
 | CVE-2022-36354 A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability. | CVSS3: 5.3 | 1% Низкий | почти 4 года назад |
| CVE-2022-36354 A heap out-of-bounds read vulnerability exists in the RLA format parse ... | CVSS3: 5.3 | 1% Низкий | почти 4 года назад |
| GHSA-fchc-223x-3cpc A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability. | CVSS3: 5.3 | 1% Низкий | почти 4 года назад |
 | BDU:2023-04789 Уязвимость библиотеки обработки изображений OpenImageIO, связанная с ошибкой единичного смещения, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 5.3 | 1% Низкий | около 4 лет назад |
| ALT-PU-2025-6890 ALT-PU-2025-6890: package `libopenimageio` update to version 2.3.21.0-alt1 | CVSS3: 9.8 | больше 1 года назад | |
| ALT-PU-2022-3225 ALT-PU-2022-3225: package `libopenimageio` update to version 2.3.21.0-alt1 | CVSS3: 9.8 | почти 4 года назад |
Уязвимостей на страницу