title: Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp
description: A vulnerability was found in OpenImageIO, where a heap buffer overflow exists in the src/gif.imageio/gifinput.cpp file. This flaw allows a remote attacker to pass a specially crafted file to the application, which triggers a heap-based buffer overflow and could cause a crash, leading to a denial of service.
problem types: Heap-based Buffer Overflow
affected:
{
product: OpenImageIO
vendor: n/a
versions:
version: 2.4.12.0, status: unaffected
}
{
product: Extra Packages for Enterprise Linux
vendor: Fedora
collectionURL: https://packages.fedoraproject.org/
packageName: OpenImageIO
defaultStatus: affected
}
{
product: Fedora
vendor: Fedora
collectionURL: https://packages.fedoraproject.org/
packageName: OpenImageIO
defaultStatus: affected
}
metrics:
other: [
content: {'value': 'Moderate', 'namespace': 'https://access.redhat.com/security/updates/classification/'}
type: Red Hat severity rating
]