CVE-2024-55192: Critical severity Openimageio Openimageio vulnerability
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIOv310::farmhash::inlined::Fetch64(char const).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/openimageioto a version that resolves this vulnerability.Fixed in 2.5.19.1+dfsg-2 - Upgrade
Upgrade
debian/openimageioto a version that resolves this vulnerability.Fixed in 3.1.18.1+dfsg-2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-55192?
CVE-2024-55192 has been classified as a moderate severity vulnerability due to its potential for heap overflow.
How do I fix CVE-2024-55192?
To mitigate CVE-2024-55192, you should update OpenImageIO to the latest stable version that addresses this vulnerability.
What component is affected by CVE-2024-55192?
CVE-2024-55192 affects the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64.
Which version of OpenImageIO is vulnerable to CVE-2024-55192?
OpenImageIO v3.1.0.0dev is the specific version identified as vulnerable to CVE-2024-55192.
What are the potential impacts of CVE-2024-55192?
CVE-2024-55192 could lead to application crashes or arbitrary code execution due to the heap overflow.