A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2022-12-23T23:03:51.372448Z

Updated: 2024-09-16T22:40:18.797Z

Reserved: 2022-09-30T00:00:00

Link: CVE-2022-41639

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-12-22T22:15:14.090

Modified: 2024-11-21T07:23:32.673

Link: CVE-2022-41639

cve-icon Redhat

No data.