An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708 | Exploit Third Party Advisory |
| https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708 | Exploit Third Party Advisory |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1708 |
Configurations
History
21 Nov 2024, 07:45
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708 - Exploit, Third Party Advisory |
05 Apr 2023, 13:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:openimageio:openimageio:2.4.7.1:*:*:*:*:*:*:* | |
| First Time |
Openimageio openimageio
Openimageio |
|
| References | (MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2023-1708 - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
30 Mar 2023, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-03-30 16:15
Updated : 2024-11-21 07:45
NVD link : CVE-2023-22845
Mitre link : CVE-2023-22845
CVE.ORG link : CVE-2023-22845
JSON object : View
Products Affected
openimageio
- openimageio
CWE
CWE-125
Out-of-bounds Read