CoreCVE
Back

HIGH

Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2

Published Dec 23, 2022

Description

Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `m_spec.format` is `TypeDesc::UINT16`.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-122

CWE-787

Out-of-bounds Write

References (4)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner talos
Published Dec 23, 2022
Updated Apr 14, 2025
Reserved Oct 21, 2022
Link CVE-2022-43598

CISA Vulnrichment

Updated Apr 14, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-43598

Red Hat

No data

ENISA EUVD

Assigner talos
Published Dec 23, 2022
Updated Apr 14, 2025
Link EUVD-2022-46594

GitHub

No data