A denial of service vulnerability exists in the DPXOutput::close() functionality of OpenImageIO Project OpenImageIO v2.4.4.2. A specially crafted ImageOutput Object can lead to null pointer dereference. An attacker can provide malicious input to trigger this vulnerability.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openimageio | Openimageio | 2.4.4.2 (including) | 2.4.4.2 (including) |
| Openimageio | Ubuntu | bionic | * |
| Openimageio | Ubuntu | kinetic | * |
| Openimageio | Ubuntu | lunar | * |
| Openimageio | Ubuntu | mantic | * |
| Openimageio | Ubuntu | trusty | * |
| Openimageio | Ubuntu | xenial | * |