Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-z2ej-wfra-53c7
Vulnerability ID VCID-z2ej-wfra-53c7
Aliases CVE-2022-41794
Summary Multiple vulnerabilities have been found in OpenImageIO, the worst of which could result in arbitrary code execution.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2022-41794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36354
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41639
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41649
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41684
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41794
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41837
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41838
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41977
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41981
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-41999
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43592
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43593
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43594
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43595
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43596
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43597
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43598
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43599
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43600
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43601
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43602
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-43603
1027143 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1027143
No exploits are available.
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.78631
EPSS Score 0.01118
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:56:49.896627+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202305-33 38.6.0