Approved changes feed: RSS · Atom

cpe:2.3:a:openimageio:openimageio:2.4.7.1:*:*:*:*:*:*:*

part: a version: 2.4.7.1 update: *

VendorOpenimageio (71e16cb4-1b9c-526b-ba35-9f960ad37de5)
ProductOpenimageio (53c1af5f-5889-5b77-a461-2c4a7f5a9e10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-24473 vulnerable 2026-06-08 05:56:05.542827 Details available
MEDIUM (5.3)
An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-03-30T15:47:41.052Z
Updated: 2024-08-02T10:56:04.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24472 vulnerable 2026-06-08 05:56:05.542420 Details available
HIGH (7.5)
A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide malicious input to trigger this vulnerability.
Published: 2023-03-30T15:47:40.229Z
Updated: 2025-02-13T16:44:15.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22845 vulnerable 2026-06-08 05:54:27.226963 Details available
HIGH (7.5)
An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
Published: 2023-03-30T15:47:40.603Z
Updated: 2024-08-02T10:20:30.734Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.