Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-43593
5.9
MEDIUMCVSS v3
Severity scale
010
Description
A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to null pointer dereference. An attacker can provide malicious input to trigger this vulnerability.
AcademySoftwareFoundation/OpenImageIO
GitHubReading, writing, and processing images in a wide variety of file formats, using a format-agnostic API, aimed at VFX applications.
GitHubReading, writing, and processing images in a wide variety of file formats, using a format-agnostic API, aimed at VFX applications.= 2.4.4.2NVD