Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-43592
HistoryDec 22, 2022 - 10:15 p.m.

Information disclosure

2022-12-2222:15:00
PRIOn knowledge base
www.prio-n.com
4
data leakage
dpxoutput
openimageio
imageoutput
heap data
vulnerability
malicious input

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.4%

An information disclosure vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.

CPENameOperatorVersion
debian_linuxeq11.0
openimageioeq2.4.4.2

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.4%