CVE-2022-38143

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bounds memory, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-123 CWE-787

Affected software

Vendor	Product	Versions
OpenImageIO Project	OpenImageIO	master-branch-9aeece7a; v2.3.19.0

References

https://security.gentoo.org/glsa/202305-33Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1630Exploit, Third Party Advisory
https://security.gentoo.org/glsa/202305-33Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1630Exploit, Third Party Advisory

Timeline

Published: Dec 22, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-381448.8Cross-Site Request Forgery (CSRF) vulnerability in gVectors Team wpForo Forum plugin <= 2.0.5 at WordPress.CVE-2022-381455.4Silverstripe silverstripe/framework through 4.11 allows XSS (issue 1 of 3) via remote attackers adding a Javascript payload to a page's meta CVE-2022-381465.4Silverstripe silverstripe/framework through 4.11 allows XSS (issue 2 of 3).CVE-2022-381475.4Silverstripe silverstripe/framework through 4.11 allows XSS (issue 3 of 3).CVE-2022-381488.8Silverstripe silverstripe/framework through 4.11 allows SQL Injection.CVE-2022-381497.5HashiCorp Consul Template up to 0.27.2, 0.28.2, and 0.29.1 may expose the contents of Vault secrets in the error returned by the *template.T CVE-2022-38156.5A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the CVE-2022-381507.5In Varnish Cache 7.0.0, 7.0.1, 7.0.2, and 7.1.0, it is possible to cause the Varnish Server to assert and automatically restart through forg CVE-2022-381527.5An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, CVE-2022-381535.9An issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however, only version 5.3.0 is exploitable. Man-in-t CVE-2022-381557.5TEE_Malloc in Samsung mTower through 0.3.0 allows a trusted application to achieve Excessive Memory Allocation via a large len value, as dem CVE-2022-381567.2A remote command injection issues exists in the web server of the Kratos SpectralNet device with SpectralNet Narrowband (NB) before 1.7.5. A