Openimageio

openimageio

Vendor: Openimageio • 54 CVEs

CVEs (54)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-55194 1Openimageio 1Openimageio Jun 17, 2026 Jan 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component /OpenImageIO/fmath.h.
CVE-2024-55193 1Openimageio 1Openimageio Jun 17, 2026 Jan 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 OpenImageIO v3.1.0.0dev was discovered to contain a segmentation violation via the component /OpenImageIO/string_view.h.
CVE-2024-55192 1Openimageio 1Openimageio Jun 17, 2026 Jan 23, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).
CVE-2023-3430 1Openimageio 1Openimageio Jun 17, 2026 Dec 18, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which trigge...Show more A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.Show less
CVE-2023-42299 1Openimageio 1Openimageio Jun 17, 2026 Nov 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_subimage_data function.
CVE-2023-42295 1Openimageio 1Openimageio Jun 17, 2026 Oct 23, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c
CVE-2023-36183 1Openimageio 1Openimageio Jun 17, 2026 Jul 3, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain sensitive information via a crafted file to the readimg function.
CVE-2023-24473 1Openimageio 1Openimageio Jun 17, 2026 Mar 30, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information...Show more An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2023-24472 1Openimageio 1Openimageio Jun 17, 2026 Mar 30, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide...Show more A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide malicious input to trigger this vulnerability.Show less
CVE-2023-22845 1Openimageio 1Openimageio Jun 17, 2026 Mar 30, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can pro...Show more An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-43603 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provid...Show more A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.Show less
CVE-2022-43602 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker ca...Show more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `ymax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT8`Show less
CVE-2022-43601 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker ca...Show more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `ymax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT16`Show less
CVE-2022-43600 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker ca...Show more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `xmax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT16`Show less
CVE-2022-43599 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker ca...Show more Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `xmax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT8`Show less
CVE-2022-43598 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution....Show more Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `m_spec.format` is `TypeDesc::UINT16`.Show less
CVE-2022-43597 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution....Show more Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `m_spec.format` is `TypeDesc::UINT8`.Show less
CVE-2022-43596 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An atta...Show more An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.Show less
CVE-2022-43595 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences...Show more Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This vulnerability applies to writing .fits files.Show less
CVE-2022-43594 2Debian Openimageio 2Debian Linux Openimageio Jun 17, 2026 Dec 22, 2022 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences...Show more Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This vulnerability applies to writing .bmp files.Show less

Previous 123 Next