Total vulnerabilities in the database
Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the ymax variable is set to 0xFFFF and m_spec.format is TypeDesc::UINT8
| Software | From | Fixed in |
|---|---|---|
| openimageio / openimageio | 2.4.4.2 | 2.4.4.2.x |
| debian / debian_linux | 11.0 | 11.0.x |