CVE-2022-43603: Null Pointer Dereference
Published Dec 22, 2022
·Updated
A denial of service vulnerability exists in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
3 affected componentsFixes available
debian/openimageio<=2.0.5~dfsg0-1
2.0.5~dfsg0-1+deb10u22.2.10.1+dfsg-1+deb11u12.4.7.1+dfsg-22.4.14.0+dfsg-1
Openimageio Openimageio=2.4.4.2
Debian Debian Linux=11.0
Event History
Dec 22, 2022
CVE Published
10:15 PM
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Dec 23, 2022
CVE Published
via MITRE·11:03 PM
Data Sourced
via MITRE·11:03 PM
DescriptionSeverityWeakness
Jan 3, 2023
Data Sourced
03:42 PM
SeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-43603?
CVE-2022-43603 is a denial of service vulnerability in the ZfileOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2.
2
What is the severity of CVE-2022-43603?
The severity of CVE-2022-43603 is medium with a severity value of 5.9.
3
How does CVE-2022-43603 impact OpenImageIO?
CVE-2022-43603 can lead to denial of service in OpenImageIO.
4
How can an attacker exploit CVE-2022-43603?
An attacker can provide a specially crafted ImageOutput Object to trigger the CVE-2022-43603 vulnerability.
5
Is there a fix available for CVE-2022-43603?
Yes, there are fixes available for CVE-2022-43603. Please refer to the references for more information.