CVE-2022-43596
CVE-2022-43596
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An information disclosure vulnerability exists in the IFFOutput channel interleaving functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to leaked heap data. An attacker can provide malicious input to trigger this vulnerability.
CVSS 5.9 · Medium · EPSS 1.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
openimageio
- Versions
- v2.4.4.2: Affected
No fix published
openimageio Debian:12
- Affected ranges
- ECOSYSTEM: < 2.4.7.1+dfsg-2
Update to 2.4.7.1+dfsg-2
openimageio Debian:13
- Affected ranges
- ECOSYSTEM: < 2.4.7.1+dfsg-2
Update to 2.4.7.1+dfsg-2
openimageio Debian:14
- Affected ranges
- ECOSYSTEM: < 2.4.7.1+dfsg-2
Update to 2.4.7.1+dfsg-2
openimageio Ubuntu:Pro:16.04:LTS
- Versions
- 1.5.17~dfsg0-1ubuntu2
- 1.5.20~dfsg0-1ubuntu2
- 1.5.23~dfsg0-1ubuntu1
- 1.6.9~dfsg0-4ubuntu1
- 1.6.10~dfsg0-1ubuntu1
- 1.6.10~dfsg0-2ubuntu1
- 1.6.11~dfsg0-1ubuntu1
- 1.6.11~dfsg0-1ubuntu1+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:Pro:18.04:LTS
- Versions
- 1.6.17~dfsg0-1ubuntu5
- 1.7.17~dfsg0-1ubuntu2
- 1.7.17~dfsg0-1ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:Pro:20.04:LTS
- Versions
- 2.0.10~dfsg0-1
- 2.0.11~dfsg0-1
- 2.0.12~dfsg0-1
- 2.0.12~dfsg0-1build1
- 2.0.12~dfsg0-1build2
- 2.1.10.1~dfsg0-5ubuntu4
- 2.1.10.1~dfsg0-5ubuntu5
- 2.1.12.0~dfsg0-1
- 2.1.12.0~dfsg0-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:22.04:LTS
- Versions
- 2.2.10.1+dfsg-1build1
- 2.2.18.0+dfsg-1
- 2.2.18.0+dfsg-1build2
- 2.2.18.0+dfsg-1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:Pro:24.04:LTS
- Versions
- 2.4.14.0+dfsg-1
- 2.4.16.0+dfsg-1
- 2.4.16.0+dfsg-1build1
- 2.4.17.0+dfsg-1
- 2.4.17.0+dfsg-1build1
- 2.4.17.0+dfsg-1.1build3
- 2.4.17.0+dfsg-1.1build4
- 2.4.17.0+dfsg-1.1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:25.10
- Versions
- 2.5.18.0+dfsg-1build1
- 2.5.18.0+dfsg-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:26.10
- Versions
- 2.5.19.1+dfsg-2
- 2.5.19.1+dfsg-2build1
- 2.5.19.1+dfsg-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:Pro:26.04:LTS
- Versions
- 2.5.18.0+dfsg-1build2
- 2.5.19.1+dfsg-1build1
- 2.5.19.1+dfsg-1build3
- 2.5.19.1+dfsg-1build5
- 2.5.19.1+dfsg-2
- 2.5.19.1+dfsg-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published