CVE-2022-43598
CVE-2022-43598
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple memory corruption vulnerabilities exist in the IFFOutput alignment padding functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to arbitrary code execution. An attacker can provide malicious input to trigger these vulnerabilities.This vulnerability arises when the `m_spec.format` is `TypeDesc::UINT16`.
CVSS 8.1 · High · EPSS 1.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
openimageio
- Versions
- v2.4.4.2: Affected
No fix published
openimageio Debian:12
- Affected ranges
- ECOSYSTEM: < 2.4.7.1+dfsg-2
Update to 2.4.7.1+dfsg-2
openimageio Debian:13
- Affected ranges
- ECOSYSTEM: < 2.4.7.1+dfsg-2
Update to 2.4.7.1+dfsg-2
openimageio Debian:14
- Affected ranges
- ECOSYSTEM: < 2.4.7.1+dfsg-2
Update to 2.4.7.1+dfsg-2
openimageio Ubuntu:Pro:16.04:LTS
- Versions
- 1.5.17~dfsg0-1ubuntu2
- 1.5.20~dfsg0-1ubuntu2
- 1.5.23~dfsg0-1ubuntu1
- 1.6.9~dfsg0-4ubuntu1
- 1.6.10~dfsg0-1ubuntu1
- 1.6.10~dfsg0-2ubuntu1
- 1.6.11~dfsg0-1ubuntu1
- 1.6.11~dfsg0-1ubuntu1+esm2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:Pro:18.04:LTS
- Versions
- 1.6.17~dfsg0-1ubuntu5
- 1.7.17~dfsg0-1ubuntu2
- 1.7.17~dfsg0-1ubuntu2+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:Pro:20.04:LTS
- Versions
- 2.0.10~dfsg0-1
- 2.0.11~dfsg0-1
- 2.0.12~dfsg0-1
- 2.0.12~dfsg0-1build1
- 2.0.12~dfsg0-1build2
- 2.1.10.1~dfsg0-5ubuntu4
- 2.1.10.1~dfsg0-5ubuntu5
- 2.1.12.0~dfsg0-1
- 2.1.12.0~dfsg0-1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:22.04:LTS
- Versions
- 2.2.10.1+dfsg-1build1
- 2.2.18.0+dfsg-1
- 2.2.18.0+dfsg-1build2
- 2.2.18.0+dfsg-1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:Pro:24.04:LTS
- Versions
- 2.4.14.0+dfsg-1
- 2.4.16.0+dfsg-1
- 2.4.16.0+dfsg-1build1
- 2.4.17.0+dfsg-1
- 2.4.17.0+dfsg-1build1
- 2.4.17.0+dfsg-1.1build3
- 2.4.17.0+dfsg-1.1build4
- 2.4.17.0+dfsg-1.1ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:25.10
- Versions
- 2.5.18.0+dfsg-1build1
- 2.5.18.0+dfsg-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:26.10
- Versions
- 2.5.19.1+dfsg-2
- 2.5.19.1+dfsg-2build1
- 2.5.19.1+dfsg-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openimageio Ubuntu:Pro:26.04:LTS
- Versions
- 2.5.18.0+dfsg-1build2
- 2.5.19.1+dfsg-1build1
- 2.5.19.1+dfsg-1build3
- 2.5.19.1+dfsg-1build5
- 2.5.19.1+dfsg-2
- 2.5.19.1+dfsg-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published