A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially-crafted .dds can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published:

Updated: 2025-02-13T16:33:14.378Z

Reserved: 2022-10-07T00:00:00.000Z

Link: CVE-2022-41838

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-12-22T22:15:15.690

Modified: 2024-11-21T07:23:54.587

Link: CVE-2022-41838

cve-icon Redhat

No data.