CVE-2023-22845: High severity openimageio vulnerability
An out-of-bounds read vulnerability exists in the TGAInput::decodepixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-22845?
CVE-2023-22845 is an out-of-bounds read vulnerability in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1 that can lead to information disclosure.
How does CVE-2023-22845 affect OpenImageIO?
CVE-2023-22845 affects OpenImageIO version 2.4.7.1 where a specially crafted targa file can be used to trigger the vulnerability and lead to information disclosure.
What is the severity of CVE-2023-22845?
CVE-2023-22845 has a severity level of 7.5 (high).
How can the CVE-2023-22845 vulnerability be exploited?
The CVE-2023-22845 vulnerability can be exploited by providing a malicious targa file to the OpenImageIO software.
Is there a fix for CVE-2023-22845?
There is no known fix for CVE-2023-22845 at the moment, it is recommended to update to a version that addresses this vulnerability once a fix is released.