Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:ebuild/media-libs/openimageio@2.4.6.0
purl pkg:ebuild/media-libs/openimageio@2.4.6.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (25)
Vulnerability Summary Aliases
VCID-1a3j-n8qp-9ueg A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3.19.0. A specially-crafted TIFF file can lead to an out of bounds memory corruption, which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-41639
VCID-1adz-3jea-7qb1 The WP Social Sharing WordPress plugin through 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). CVE-2022-4198
VCID-2unm-cw76-dbe1 Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `ymax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT8` CVE-2022-43602
VCID-46zd-n8h7-mkcw An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. A specially-crafted TIFF file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-41977
VCID-4fes-tcdp-gkfb Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `m_spec.format` is `TypeDesc::UINT8`. CVE-2022-43597
VCID-61ft-zyt6-dbev Multiple vulnerabilities have been found in OpenImageIO, the worst of which could result in arbitrary code execution. CVE-2022-43594
VCID-66hk-e9k1-cqhw Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `xmax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT16` CVE-2022-43600
VCID-7qu3-7jbx-nydz An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability. CVE-2022-43592
VCID-9bxz-zcy5-87f3 An out-of-bounds write vulnerability exists in the OpenImageIO::add_exif_item_to_spec functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially-crafted exif metadata can lead to stack-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-41837
VCID-ae73-97pq-vqam A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to null pointer dereference. An attacker can provide malicious input to trigger this vulnerability. CVE-2022-43593
VCID-afs6-51yu-vucd An information disclosure vulnerability exists in the OpenImageIO::decode_iptc_iim() functionality of OpenImageIO Project OpenImageIO v2.3.19.0. A specially-crafted TIFF file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-41988
VCID-b5k4-4me9-hqcr A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-43603
VCID-cxpj-2qcz-skbg A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. More specifically, in the way run-length encoded byte spans are handled. A malformed RLA file can lead to an out-of-bounds read of heap metadata which can result in sensitive information leak. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-36354
VCID-ds9q-ju9a-y3be Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `ymax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT16` CVE-2022-43601
VCID-ee9m-9zse-g7fm A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-41981
VCID-g7ne-2wgw-h7dr Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to a heap buffer overflow. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `xmax` variable is set to 0xFFFF and `m_spec.format` is `TypeDesc::UINT8` CVE-2022-43599
VCID-k4h9-hup1-2fa3 Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This vulnerability applies to writing .fits files. CVE-2022-43595
VCID-kd8g-uk37-4ydw Multiple vulnerabilities have been found in OpenImageIO, the worst of which could result in arbitrary code execution. CVE-2022-41649
VCID-mfv9-1yrt-zubm Multiple vulnerabilities have been found in OpenImageIO, the worst of which could result in arbitrary code execution. CVE-2022-38143
VCID-rprf-4mns-3fdc A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-crafted .dds can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-41999
VCID-rum5-duz5-eqdp A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD image file. A specially-crafted .psd file can cause a read of arbitrary memory address which can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-41684
VCID-t6q8-9k68-k3aw An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability. CVE-2022-43596
VCID-twx6-98cg-93fc A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability. CVE-2022-41838
VCID-upup-adwg-dfhc Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `m_spec.format` is `TypeDesc::UINT16`. CVE-2022-43598
VCID-z2ej-wfra-53c7 Multiple vulnerabilities have been found in OpenImageIO, the worst of which could result in arbitrary code execution. CVE-2022-41794

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-11T17:56:50.167477+00:00 Gentoo Importer Fixing VCID-b5k4-4me9-hqcr https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.153329+00:00 Gentoo Importer Fixing VCID-2unm-cw76-dbe1 https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.139094+00:00 Gentoo Importer Fixing VCID-ds9q-ju9a-y3be https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.122532+00:00 Gentoo Importer Fixing VCID-66hk-e9k1-cqhw https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.107880+00:00 Gentoo Importer Fixing VCID-g7ne-2wgw-h7dr https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.092252+00:00 Gentoo Importer Fixing VCID-upup-adwg-dfhc https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.077920+00:00 Gentoo Importer Fixing VCID-4fes-tcdp-gkfb https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.063736+00:00 Gentoo Importer Fixing VCID-t6q8-9k68-k3aw https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.049659+00:00 Gentoo Importer Fixing VCID-k4h9-hup1-2fa3 https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.035581+00:00 Gentoo Importer Fixing VCID-61ft-zyt6-dbev https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.016710+00:00 Gentoo Importer Fixing VCID-ae73-97pq-vqam https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:50.001783+00:00 Gentoo Importer Fixing VCID-7qu3-7jbx-nydz https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.987619+00:00 Gentoo Importer Fixing VCID-rprf-4mns-3fdc https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.973333+00:00 Gentoo Importer Fixing VCID-afs6-51yu-vucd https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.959117+00:00 Gentoo Importer Fixing VCID-ee9m-9zse-g7fm https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.944943+00:00 Gentoo Importer Fixing VCID-46zd-n8h7-mkcw https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.930721+00:00 Gentoo Importer Fixing VCID-twx6-98cg-93fc https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.915925+00:00 Gentoo Importer Fixing VCID-9bxz-zcy5-87f3 https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.901716+00:00 Gentoo Importer Fixing VCID-z2ej-wfra-53c7 https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.883444+00:00 Gentoo Importer Fixing VCID-rum5-duz5-eqdp https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.869284+00:00 Gentoo Importer Fixing VCID-kd8g-uk37-4ydw https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.852725+00:00 Gentoo Importer Fixing VCID-1a3j-n8qp-9ueg https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.837735+00:00 Gentoo Importer Fixing VCID-mfv9-1yrt-zubm https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.821174+00:00 Gentoo Importer Fixing VCID-cxpj-2qcz-skbg https://security.gentoo.org/glsa/202305-33 38.6.0
2026-06-11T17:56:49.806999+00:00 Gentoo Importer Fixing VCID-1adz-3jea-7qb1 https://security.gentoo.org/glsa/202305-33 38.6.0