Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Количество 22

Количество 22

altlinux логотип

ALT-PU-2025-6890

больше 1 года назад

ALT-PU-2025-6890: package `libopenimageio` update to version 2.3.21.0-alt1

CVSS3: 9.8
EPSS: Низкий
altlinux логотип

ALT-PU-2022-3225

почти 4 года назад

ALT-PU-2022-3225: package `libopenimageio` update to version 2.3.21.0-alt1

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2022-36354

почти 4 года назад

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2022-36354

почти 4 года назад

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2022-36354

почти 4 года назад

A heap out-of-bounds read vulnerability exists in the RLA format parse ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-fchc-223x-3cpc

почти 4 года назад

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 5.3
EPSS: Низкий
fstec логотип

BDU:2023-04789

около 4 лет назад

Уязвимость библиотеки обработки изображений OpenImageIO, связанная с ошибкой единичного смещения, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2022-41639

почти 4 года назад

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2022-41639

почти 4 года назад

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2022-41639

почти 4 года назад

A heap based buffer overflow vulnerability exists in tile decoding cod ...

CVSS3: 9.8
EPSS: Низкий
github логотип

GHSA-8vqv-gv6p-pjjr

почти 4 года назад

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
EPSS: Низкий
fstec логотип

BDU:2023-04793

около 4 лет назад

Уязвимость библиотеки обработки изображений OpenImageIO, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2022-41988

почти 4 года назад

An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2022-41988

почти 4 года назад

An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2022-41988

почти 4 года назад

An information disclosure vulnerability exists in the OpenImageIO::dec ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2022-41977

почти 4 года назад

An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 3.3
EPSS: Низкий
nvd логотип

CVE-2022-41977

почти 4 года назад

An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 3.3
EPSS: Низкий
debian логотип

CVE-2022-41977

почти 4 года назад

An out of bounds read vulnerability exists in the way OpenImageIO vers ...

CVSS3: 3.3
EPSS: Низкий
github логотип

GHSA-ph8f-7wjw-g922

почти 4 года назад

An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 3.3
EPSS: Низкий
github логотип

GHSA-544j-8m5v-3frm

почти 4 года назад

An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
altlinux логотип
ALT-PU-2025-6890

ALT-PU-2025-6890: package `libopenimageio` update to version 2.3.21.0-alt1

CVSS3: 9.8
больше 1 года назад
altlinux логотип
ALT-PU-2022-3225

ALT-PU-2022-3225: package `libopenimageio` update to version 2.3.21.0-alt1

CVSS3: 9.8
почти 4 года назад
ubuntu логотип
CVE-2022-36354

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 5.3
1%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-36354

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 5.3
1%
Низкий
почти 4 года назад
debian логотип
CVE-2022-36354

A heap out-of-bounds read vulnerability exists in the RLA format parse ...

CVSS3: 5.3
1%
Низкий
почти 4 года назад
github логотип
GHSA-fchc-223x-3cpc

A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 5.3
1%
Низкий
почти 4 года назад
fstec логотип
BDU:2023-04789

Уязвимость библиотеки обработки изображений OpenImageIO, связанная с ошибкой единичного смещения, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5.3
1%
Низкий
около 4 лет назад
ubuntu логотип
CVE-2022-41639

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
2%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-41639

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
2%
Низкий
почти 4 года назад
debian логотип
CVE-2022-41639

A heap based buffer overflow vulnerability exists in tile decoding cod ...

CVSS3: 9.8
2%
Низкий
почти 4 года назад
github логотип
GHSA-8vqv-gv6p-pjjr

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 9.8
2%
Низкий
почти 4 года назад
fstec логотип
BDU:2023-04793

Уязвимость библиотеки обработки изображений OpenImageIO, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

CVSS3: 9.8
2%
Низкий
около 4 лет назад
ubuntu логотип
CVE-2022-41988

An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
1%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-41988

An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
1%
Низкий
почти 4 года назад
debian логотип
CVE-2022-41988

An information disclosure vulnerability exists in the OpenImageIO::dec ...

CVSS3: 7.5
1%
Низкий
почти 4 года назад
ubuntu логотип
CVE-2022-41977

An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 3.3
1%
Низкий
почти 4 года назад
nvd логотип
CVE-2022-41977

An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 3.3
1%
Низкий
почти 4 года назад
debian логотип
CVE-2022-41977

An out of bounds read vulnerability exists in the way OpenImageIO vers ...

CVSS3: 3.3
1%
Низкий
почти 4 года назад
github логотип
GHSA-ph8f-7wjw-g922

An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 3.3
1%
Низкий
почти 4 года назад
github логотип
GHSA-544j-8m5v-3frm

An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.

CVSS3: 7.5
1%
Низкий
почти 4 года назад

Уязвимостей на страницу