7.5
Élevée
CVE-2023-3430 A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file
Description
A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenImageIO 2.4 | premières → < 2.4.12.0 | 2.4.12.0 |
| Extra Packages for Enterprise Linux | Versions non publiées | |
| Fedora | Versions non publiées |
Références
- RHBZ#2218380 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification