What’s Vulnerable › Vulnerabilities

CVE-2023-3430: Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-18 · updated 2026-06-17
• Weakness: CWE-122

Description

A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.

Affected products

• OpenImageIO Project OpenImageIO: 2.4.11

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2218380
• https://github.com/AcademySoftwareFoundation/OpenImageIO/issues/3840
• https://bugzilla.redhat.com/show_bug.cgi?id=2218380

Get alerted when CVE-2023-3430 or the next vulnerability affects your stack