Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-41794

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. A specially-crafted PSD file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Published

2022-12-22T22:15:15.063

Last Modified

2024-11-21T07:23:51.393

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Secondary
    CWE-122
  • Type: Secondary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application openimageio openimageio 2.3.19.0 Yes
Operating System debian debian_linux 11.0 Yes
References