Vulnerabilities > CVE-2023-3430 - Out-of-bounds Write vulnerability in Openimageio 2.4.11

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
openimageio
CWE-787

Summary

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.

Vulnerable Configurations

Part Description Count
Application
Openimageio
1
OS
Redhat
1

Common Weakness Enumeration (CWE)