CVE-2022-41981

A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1628 Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:openimageio_project:openimageio:2.3.19.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

Information

Published : 2022-12-22 10:15

Updated : 2023-02-01 06:15


NVD link : CVE-2022-41981

Mitre link : CVE-2022-41981

Products Affected
No products.
CWE