CVE-2022-43594

Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these...

[SECURITY] [DSA 5384-1] openimageio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5384-1 [email protected] https://www.debian.org/security/ Markus Koschany April 10, 2023 https://www.debian.org/security/faq -...

CVE-2022-43594

OpenImageIO OpenImageIO v2.4.4.2 contains multiple CVEs (including CVE-2022-43594) leading to denial of service via image output closing, with null pointer dereferences when writing BMP/other formats. Affected component is the ImageOutput close/format handling; root cause relates to memory safety...