Remote Code Execution (RCE)

libOpenImageIO.so is vulnerable to Remote Code Execution (RCE). An attacker could exploit this vulnerability by tricking a user into opening a malicious image file. The file would contain a specially crafted image that would cause the OpenImageIO library to overflow a buffer and possibly execute arbitrary code. The vulnerability exists in the read_rle_image function of the file bifs/unquantize.c.