CVE-2023-3430
Fixed in a distro release EPSS 1%CVSS 7.5
A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.
Products: Fedora Extra Packages for Enterprise Linux, Fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | openimageio | no fix |
| Debian 13 | openimageio | 2.4.13.0+dfsg-1 |
| Debian 14 | openimageio | 2.4.13.0+dfsg-1 |
| Ubuntu 22.04 LTS | openimageio | no fix |
| Ubuntu Pro 16.04 LTS | openimageio | no fix |
| Ubuntu Pro 18.04 LTS | openimageio | no fix |
| Ubuntu Pro 20.04 LTS | openimageio | no fix |