Vulnerability Spotlight: Open ImageIO file processing issues could lead to arbitrary code execution, sensitive information leak and denial of service
Cisco Talos discovered nineteen vulnerabilities in OpenImageIO, an image processing library used by AliceVision's 3D-processing software including Meshroom and by Blender for reading Photoshop .psd files. The flaws, found in how OpenImageIO processed .tif,...