Vulnerability Spotlight: Specially crafted files could lead to denial of service, information disclosure in Open ImageIO parser
Cisco Talos discovered three vulnerabilities in the OpenImageIO image-parsing library used by 3-D rendering software including Blender and AliceVision. Two of them, TALOS-2023-1707 (CVE-2023-24473) and TALOS-2023-1708 (CVE-2023-22845), could disclose...