CVE-2023-22845 - An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1

Back Back to CVE browser

HIGH

An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1

Published Mar 30, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.94%

Description

An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

Vendor OpenImageIO Project Product OpenImageIO Default
n/a
- Version
  v2.4.7.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

OpenImageIO Project

OpenImageIO

n/a

Version	Status	Constraints
v2.4.7.1	affected	-

Vendor Openimageio Product Openimageio Default
n/a
- Version
  2.4.7.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Openimageio

n/a

Version	Status	Constraints
2.4.7.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708
ExploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1708

Link	Providers	Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708		ExploitThird Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1708