CVE-2022-43598

Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This...

shopify-scripts: Null pointer dereferences in kh_copy_mt

@ssarong reported an input that triggers a null pointer dereference: https://github.com/mruby/mruby/pull/3615 The issue was addressed in https://github.com/mruby/mruby/commit/de969942338ac440294eefb2e7846a6975f4efdd...