7.5
High
CVE-2023-3430 A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file
Description
A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenImageIO 2.4 | earliest → < 2.4.12.0 | 2.4.12.0 |
| Extra Packages for Enterprise Linux | Versions not published | |
| Fedora | Versions not published |
References
- RHBZ#2218380 bugzilla.redhat.com
Timeline
- Published
- Last modified