CyberRota Analysis
AI-GeneratedOpenSlide versions 3.4.1 through 4.0.1 are vulnerable due to improper handling of nonpositive row or column tile counts in the parse_level0_xml() function, which can lead to arbitrary memory writes. This vulnerability could result in application crashes or allow attackers to execute arbitrary code on affected systems. Organizations using OpenSlide, particularly those handling sensitive image data, should prioritize upgrading to version 4.0.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a crafted Ventana BIF file. The invalid counts produce attacker-controlled relative memory offsets and allow arbitrary values to be written at those offsets, affecting all supported platforms and configurations and resulting in a crash or potential arbitrary code execution. This issue is fixed in version 4.0.1.