CVE-2024-55192

OpenImageIO v3.1.0.0dev was discovered to contain a heap overflow via the component OpenImageIO_v3_1_0::farmhash::inlined::Fetch64(char const*).

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2025-01-23

Last modified

2025-02-05

Weaknesses

CWE-122, CWE-787

Affected products

• Openimageio (Openimageio)

References

• https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/4550