Search Results (44 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-42295 1 Openimageio 1 Openimageio 2024-11-21 8.8 High
An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c
CVE-2023-3430 2 Openimageio, Redhat 2 Openimageio, Linux 2024-11-21 7.5 High
A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.
CVE-2023-24473 1 Openimageio 1 Openimageio 2024-11-21 5.3 Medium
An information disclosure vulnerability exists in the TGAInput::read_tga2_header functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to a disclosure of sensitive information. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2023-22845 1 Openimageio 1 Openimageio 2024-11-21 7.5 High
An out-of-bounds read vulnerability exists in the TGAInput::decode_pixel() functionality of OpenImageIO Project OpenImageIO v2.4.7.1. A specially crafted targa file can lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability.