CVE-2023-42295

2023-10-2315:15:09

Google

osv.dev

openimageio

vulnerability

remote code execution

denial of service

8.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c

CPENameOperatorVersion
openimageioeq2.4.3.0-RC1
openimageioeqRelease-1.6.4de
openimageioeqspi-Arn3.5.5.0
openimageioeqRelease-1.5.5de
openimageioeqRelease-1.7.0de
openimageioeqRelease-1.3.3-de
openimageioeqspi-Arn3.5.14.0
openimageioeqRelease-1.7.2de
openimageioeqRelease-1.3.6-de
openimageioeqRelease-1.9.1de

Name	Operator	Version
openimageio	eq	2.4.3.0-RC1
openimageio	eq	Release-1.6.4de
openimageio	eq	spi-Arn3.5.5.0
openimageio	eq	Release-1.5.5de
openimageio	eq	Release-1.7.0de
openimageio	eq	Release-1.3.3-de
openimageio	eq	spi-Arn3.5.14.0
openimageio	eq	Release-1.7.2de
openimageio	eq	Release-1.3.6-de
openimageio	eq	Release-1.9.1de