Read the docs

OpenImageIO Project

Records54All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

OpenImageIO Project records in CISA KEV

No OpenImageIO Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

54 records in Openimageio · all components

TI-2022-20191 CVE-2022-41838 · GHSA-5p79-g28m-p2cr

Heap-based buffer overflow in OpenImageIO

Priority HIGH 82

A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01944 Published 2022-12-23 No fix listed CWE-122
TI-2022-20190 CVE-2022-41837 · GHSA-2hg4-4q69-pf8q

Out-of-bounds write in OpenImageIO

Priority HIGH 82

An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01672 Published 2022-12-23 No fix listed CWE-562
TI-2022-20168 CVE-2022-41794 · GHSA-f95p-6c38-4mr6

Heap-based buffer overflow in OpenImageIO

Priority HIGH 82

A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01987 Published 2022-12-23 No fix listed CWE-122
TI-2022-20036 CVE-2022-41639 · GHSA-8vqv-gv6p-pjjr

Heap-based buffer overflow in OpenImageIO

Priority HIGH 82

A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01944 Published 2022-12-23 No fix listed CWE-122
TI-2022-20044 CVE-2022-41649 · GHSA-74vr-xvvm-6f75

Out-of-bounds read in OpenImageIO

Priority HIGH 78

A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01542 Published 2022-12-23 No fix listed CWE-125
Priority HIGH 72

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00188 Published 2026-05-14 Fixed in 3.0.18.0, 3.1.13.0 CWE-122
TI-2023-10094 CVE-2023-24473 · GHSA-9r8p-967f-crjr

Out-of-bounds read in OpenImageIO

Priority HIGH 72

An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00859 Published 2023-03-30 No fix listed CWE-125
TI-2023-08999 CVE-2023-22845 · GHSA-x28w-rxm5-x896

Out-of-bounds read in OpenImageIO

Priority HIGH 72

An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00943 Published 2023-03-30 No fix listed CWE-125
TI-2022-20338 CVE-2022-41999 · GHSA-53m8-xvh9-f42p

NULL pointer dereference in OpenImageIO

Priority HIGH 72

A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01522 Published 2022-12-23 No fix listed CWE-476
TI-2022-20328 CVE-2022-41988 · GHSA-544j-8m5v-3frm

Out-of-bounds read in OpenImageIO

Priority HIGH 72

An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01237 Published 2022-12-23 No fix listed CWE-125
Priority HIGH 71

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.0037 Published 2026-05-14 Fixed in 3.0.18.0, 3.1.13.0 CWE-190
TI-2022-21370 CVE-2022-43602 · GHSA-5c39-hcvq-5xxc

Heap-based buffer overflow in OpenImageIO

Priority HIGH 70

Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02077 Published 2022-12-23 No fix listed CWE-122
TI-2022-21369 CVE-2022-43601 · GHSA-jm5g-c2v4-w5fp

Heap-based buffer overflow in OpenImageIO

Priority HIGH 70

Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01797 Published 2022-12-23 No fix listed CWE-122
TI-2022-21368 CVE-2022-43600 · GHSA-j94m-6fwj-5pv8

Heap-based buffer overflow in OpenImageIO

Priority HIGH 70

Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01797 Published 2022-12-23 No fix listed CWE-122
TI-2022-21367 CVE-2022-43599 · GHSA-j7wh-9q3q-qcg6

Heap-based buffer overflow in OpenImageIO

Priority HIGH 70

Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02102 Published 2022-12-23 No fix listed CWE-122
TI-2022-21366 CVE-2022-43598 · GHSA-66xw-mfrq-qf6g

Heap-based buffer overflow in OpenImageIO

Priority HIGH 70

Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01937 Published 2022-12-23 No fix listed CWE-122
Load more
Open these records in search →