OpenImageIO v3.1.16.0 Security Update: Fixing OOB Writes and Integer Overflows in Image Parsers

OpenImageIO v3.1.16.0 Security Update Summary Vulnerability Overview This update fixes multiple security vulnerabilities, primarily involving: Deserialization Bomb Attacks: Added the global property via the to limit image dimensions, mitigating deserialization bomb attacks (#5297) Heap Overflows/Out-of-Bounds Writes: Fixed multiple heap overflow and out-of-bounds write issues in various format parsers Integer Overflow: Fixed a signed integer overflow in the format (#5274) Memory Allocation Issues: Fixed memory issues caused by erroneous allocations in several formats DoS Attacks: Fixed Denial of Service (DoS) vulnerabilities in multiple formats Affected Scope Affected Formats: - : Fixed integer overflow (#5274) - : Fixed erroneous string allocation triggered by corrupted ICO files (#5289) - : Fixed out-of-bounds write triggered by corrupted ITF files (#5268) - : Fixed out-of-bounds write triggered by corrupted JXR files (#5305) - : Fixed out-of-bounds write triggered by corrupted KTX files (#5265) - : Fixed out-of-bounds write triggered by corrupted PNM files (#5292) - : Fixed out-of-bounds write triggered by corrupted PSD files (#5288) - : Fixed out-of-bounds write triggered by corrupted RAW files (#5275) - : Fixed out-of-bounds write triggered by corrupted SGI files (#5322) - : Fixed out-of-bounds write triggered by corrupted TIFF files (#5319) - : Fixed out-of-bounds write triggered by corrupted WebP files (#5306) - : Fixed out-of-bounds write triggered by corrupted XDR files (#5322) Remediation Measures Global Property Limits: Limit image dimensions using the global property to prevent deserialization bomb attacks Boundary Checks: Added boundary checks to multiple format parsers to prevent out-of-bounds writes Memory Management: Optimized memory allocation and deallocation logic to prevent memory leaks and overflows Error Handling: Enhanced error handling mechanisms to prevent crashes caused by invalid input POC/Exploit Code The provided documentation does not include specific POC code or exploit code blocks.

Goal Reached Thanks to every supporter — we hit 100%!

OpenImageIO v3.1.16.0 Security Update: Fixing OOB Writes and Integer Overflows in Image Parsers

More from this source