CVE-2022-43595CWE-476

Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2

Medium · published December 23, 2022

CVSS v3.1
5.9
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2. Specially crafted ImageOutput Objects can lead to multiple null pointer dereferences. An attacker can provide malicious multiple inputs to trigger these vulnerabilities.This vulnerability applies to writing .fits files.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01268 · 69.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2022-12-23T23:03Z
EPSS history
Timeline
  • 23 DEC 23:03Z
    Multiple denial of service vulnerabilities exist in the image output closing functionality of OpenImageIO Project OpenImageIO v2.4.4.2
    cvelistv5