9.8Kritisch
CVE-2024-55192
Beschreibung
OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| openimageio | openimageio | 3.1.0.0 |
Referenzen und Patches
- https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4550 ExploitThird Party Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:openimageio:openimageio:3.1.0.0:dev:*:*:*:*:*:*