CyberRota Analysis
AI-GeneratedOpenImageIO versions prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1 are vulnerable to a denial of service caused by processing truncated TGA files, which can lead to an out-of-bounds read during GIF palette construction. This vulnerability can cause application crashes, impacting users who rely on OpenImageIO for image file manipulation in VFX and animation workflows. Users and organizations utilizing affected versions should prioritize updating to the patched releases to mitigate potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1, A truncated tga can leave a pending gif frame that is processed during output close. gifsplitpalette() computes numpixels multiplied by the palette partition width in signed 32-bit arithmetic; a large image overflows that intermediate, corrupts subpixelsa, and drives an out-of-bounds read while building the gif palette, resulting in a process crash and denial of service. The affected implementation is identified by src/gif.imageio/gif.h, GifSplitPalette(), numPixels, subPixelsA, GIFOutput, and truncated TGA input, which define the relevant source path, functions, state, and trigger. This issue is fixed in versions 3.0.21.0, 3.1.16.0, and 3.2.0.3-beta1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)