CyberRota Analysis
AI-GeneratedOpenImageIO versions prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1 are vulnerable to a heap out-of-bounds read and potential process crash when handling indexed PSD files with transparency metadata, due to a mismatch between the stored channel buffers and the advertised channel count. This vulnerability primarily affects users in the visual effects and animation industries who utilize OpenImageIO for image file manipulation. Organizations using these versions should prioritize upgrading to the patched releases to mitigate the risk of crashes and potential data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, An indexed psd with transparency metadata creates fewer stored channel_buffers than the spec.nchannels value advertised by the rawcolor path. when oiio:rawcolor or psd:rawdata is enabled, psdinput::read_native_scanline() passes spec.nchannels to psdinput::interleave_row(), which indexes beyond channel_buffers, resulting in a heap out-of-bounds read and process crash. The affected implementation is identified by src/psd.imageio/psdinput.cpp, PSDInput::read_native_scanline(), PSDInput::interleave_row(), oiio:RawColor, psd:RawData, channel_buffers, and spec.nchannels, which define the relevant source path, functions, state, and trigger. This issue is fixed in versions 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)