# cve.now: Openimageio Project

The newest entries naming Openimageio Project as an affected vendor (up to 200), of 27 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-24473](https://cve.now/CVE-2023-24473.md): An information disclosure vulnerability exists in the TGAInput::read\_tga2\_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. (CVSS 5.3)
- [CVE-2023-22845](https://cve.now/CVE-2023-22845.md): An out-of-bounds read vulnerability exists in the TGAInput::decode\_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. (CVSS 7.5)
- [CVE-2023-24472](https://cve.now/CVE-2023-24472.md): A denial of service vulnerability exists in the FitsOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. (CVSS 7.5)
- [CVE-2022-43603](https://cve.now/CVE-2022-43603.md): A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9)
- [CVE-2022-43602](https://cve.now/CVE-2022-43602.md): Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 8.1)
- [CVE-2022-43601](https://cve.now/CVE-2022-43601.md): Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 8.1)
- [CVE-2022-43600](https://cve.now/CVE-2022-43600.md): Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 8.1)
- [CVE-2022-43599](https://cve.now/CVE-2022-43599.md): Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 8.1)
- [CVE-2022-43598](https://cve.now/CVE-2022-43598.md): Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4. (CVSS 8.1)
- [CVE-2022-43597](https://cve.now/CVE-2022-43597.md): Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4. (CVSS 8.1)
- [CVE-2022-43596](https://cve.now/CVE-2022-43596.md): An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4 (CVSS 5.9)
- [CVE-2022-43595](https://cve.now/CVE-2022-43595.md): Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9)
- [CVE-2022-43594](https://cve.now/CVE-2022-43594.md): Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9)
- [CVE-2022-43593](https://cve.now/CVE-2022-43593.md): A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9)
- [CVE-2022-43592](https://cve.now/CVE-2022-43592.md): An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 5.9)
- [CVE-2022-41999](https://cve.now/CVE-2022-41999.md): A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4. (CVSS 7.5)
- [CVE-2022-41988](https://cve.now/CVE-2022-41988.md): An information disclosure vulnerability exists in the OpenImageIO::decode\_iptc\_iim() functionality of OpenImageIO Project OpenImageIO v2.3.1 (CVSS 5.3)
- [CVE-2022-41981](https://cve.now/CVE-2022-41981.md): A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. (CVSS 8.1)
- [CVE-2022-41977](https://cve.now/CVE-2022-41977.md): An out of bounds read vulnerability exists in the way OpenImageIO version v2.3.19.0 processes string fields in TIFF image files. (CVSS 5.3)
- [CVE-2022-41838](https://cve.now/CVE-2022-41838.md): A code execution vulnerability exists in the DDS scanline parsing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. (CVSS 9.8)
- [CVE-2022-41837](https://cve.now/CVE-2022-41837.md): An out-of-bounds write vulnerability exists in the OpenImageIO::add\_exif\_item\_to\_spec functionality of OpenImageIO Project OpenImageIO v2.4. (CVSS 9.8)
- [CVE-2022-41794](https://cve.now/CVE-2022-41794.md): A heap based buffer overflow vulnerability exists in the PSD thumbnail resource parsing code of OpenImageIO 2.3.19.0. (CVSS 9.8)
- [CVE-2022-41684](https://cve.now/CVE-2022-41684.md): A heap out of bounds read vulnerability exists in the OpenImageIO master-branch-9aeece7a when parsing the image file directory part of a PSD (CVSS 7.5)
- [CVE-2022-41649](https://cve.now/CVE-2022-41649.md): A heap out of bounds read vulnerability exists in the handling of IPTC data while parsing TIFF images in OpenImageIO v2.3.19.0. (CVSS 7.5)
- [CVE-2022-41639](https://cve.now/CVE-2022-41639.md): A heap based buffer overflow vulnerability exists in tile decoding code of TIFF image parser in OpenImageIO master-branch-9aeece7a and v2.3. (CVSS 9.8)
- [CVE-2022-38143](https://cve.now/CVE-2022-38143.md): A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. (CVSS 9.8)
- [CVE-2022-36354](https://cve.now/CVE-2022-36354.md): A heap out-of-bounds read vulnerability exists in the RLA format parser of OpenImageIO master-branch-9aeece7a and v2.3.19.0. (CVSS 5.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/openimageio-project
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.