Back to Database
Status published
Medium
CVE-2022-43594
Multiple denial of service vulnerabilities exist in the image output...
Vulnerability Description
Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This vulnerability applies to writing .bmp files.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43594
Credits & Attribution
No credits recorded in the NVD database.
References
More from OpenImageIO Project
View All →CVE-2023-24473
An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of...
Medium
5.3
CVE-2023-24472
A denial of service vulnerability exists in the FitsOutput::close() functionality...
High
7.5
CVE-2023-22845
An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of...
High
7.5
CVE-2022-43603
A denial of service vulnerability exists in the ZfileOutput::close() functionality...
Medium
5.9
CVE-2022-43602
Multiple code execution vulnerabilities exist in the IFFOutput::close() functionality of...
High
8.1
Affected Vendor
OpenImageIO Project
View all reports →Affected Software
OpenImageIO
Vulnerable Versions:
v2.4.4.2
Timeline
Official Publish:
December 23rd, 2022
Last Modified:
February 13th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H