CVE-2022-43595

Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This vulnerability applies to writing .fits files.
Configurations

Configuration 1 (hide)

cpe:2.3:a:openimageio:openimageio:2.4.4.2:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

History

30 May 2023, 06:15

Type Values Removed Values Added
References
  • (MISC) https://security.gentoo.org/glsa/202305-33 -

Information

Published : 2022-12-22 22:15

Updated : 2024-02-28 19:51


NVD link : CVE-2022-43595

Mitre link : CVE-2022-43595

CVE.ORG link : CVE-2022-43595


JSON object : View

Products Affected

openimageio

  • openimageio

debian

  • debian_linux
CWE
CWE-476

NULL Pointer Dereference