An information disclosure vulnerability exists in the...
Moderate severity
Unreviewed
Published
Dec 23, 2022
to the GitHub Advisory Database
•
Updated May 30, 2023
Description
Published by the National Vulnerability Database
Dec 22, 2022
Published to the GitHub Advisory Database
Dec 23, 2022
Last updated
May 30, 2023
An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.
References