CVE-2023-42299

Summary

CVE-2023-42299 is a critical buffer overflow vulnerability affecting OpenImageIO (oiio) version 2.4.12.0. An attacker can exploit this vulnerability in the read_subimage_data function to execute arbitrary code, potentially leading to a remote code execution. Additionally, the vulnerability can be used to cause a denial of service. This issue poses a significant risk to systems that use OpenImageIO and have not been patched against this vulnerability. It is strongly recommended that users upgrade to the latest version of OpenImageIO to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.