CVE-2022-41999

A denial of service vulnerability exists in the DDS native tile reading functionality of OpenImageIO Project OpenImageIO v2.3.19.0 and v2.4.4.2. A specially-crafted .dds can lead to denial of service. An attacker can provide a malicious file to trigger this vulnerability.
References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1635 Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:openimageio_project:openimageio:2.3.19.0:*:*:*:*:*:*:*
cpe:2.3:a:openimageio_project:openimageio:2.4.4.2:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*

Information

Published : 2022-12-22 10:15

Updated : 2023-02-01 06:15


NVD link : CVE-2022-41999

Mitre link : CVE-2022-41999

Products Affected
No products.
CWE