CyberRota Analysis
AI-GeneratedOpenImageIO versions prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1 are vulnerable to a heap out-of-bounds write due to improper handling of tiled OpenEXR images with non-multiple widths, leading to potential memory corruption. This vulnerability can be exploited when processing specific image files, posing a significant risk to applications relying on OpenImageIO for image manipulation in VFX and animation. Organizations using affected versions should prioritize updating to the patched releases to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A valid tiled openexr image whose width is not a multiple of its tile width can trigger an overflow when a caller reads a partial edge-tile rectangle. openexrinput::read_native_tiles() copies each row into the caller buffer using the padded whole-tile scanline_stride rather than user_scanline_bytes for the requested rectangle, resulting in a heap out-of-bounds write and memory corruption. The affected implementation is identified by src/openexr.imageio/exrinput.cpp, OpenEXRInput::read_native_tiles(), partial edge tile, user_scanline_bytes, and scanline_stride, which define the relevant source path, functions, state, and trigger. This issue is fixed in versions 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)