Beveiligingsadvies

CVE-2022-41838

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-12-23 23:03:51
Laatst bijgewerkt 2025-04-15 14:24:43
Toegewezen door talos
CVSS-score 9.8
Status PUBLISHED

Beschrijving

A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.