tocsin

Debian/openimageio: high 8.1

A stack-based buffer overflow vulnerability exists in the TGA file format parser of OpenImageIO v2.3.19.0. A specially-crafted targa file can lead to out of bounds read and write on the process stack,

Action: Upgrade openimageio to 2.4.7.1+dfsg-2 or later.

Affected

introducedfixedlast affected
02.4.7.1+dfsg-2-

Fixed versions

2.4.7.1+dfsg-2

Sources

published · modified · JSON