CyberRota Analysis
AI-GeneratedOpenImageIO versions prior to 3.1.16.0 are vulnerable to a heap out-of-bounds write due to improper handling of 1-bit CMYK TIFF images, which can lead to memory corruption. This vulnerability poses a significant risk for applications that rely on image processing, particularly in VFX and animation, as it could be exploited to execute arbitrary code or crash the application. Organizations using affected versions should prioritize upgrading to the latest release to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.1.16.0, A crafted 1-bit contiguous cmyk tiff is exposed through a native uint1 imagespec, so callers allocate a bit-packed buffer. tiffinput::read_native_scanline_locked() nevertheless invokes tiffinput::bit_convert() with 8-bit output and writes one expanded byte per value into that smaller buffer, resulting in a heap out-of-bounds write and memory corruption. The affected implementation is identified by src/tiff.imageio/tiffinput.cpp, TIFFInput::bit_convert(), TIFFInput::read_native_scanline_locked(), PHOTOMETRIC_SEPARATED, 1-bit CMYK, and native uint1 ImageSpec, which define the relevant source path, functions, state, and trigger. This issue is fixed in 3.1.16.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)