CVE-2023-36183: Buffer Overflow
Buffer Overflow vulnerability in OpenImageIO v.2.4.12.0 and before allows a remote to execute arbitrary code and obtain sensitive information via a crafted file to the readimg function.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/openimageioto a version that resolves this vulnerability.Fixed in 2.4.11.0-r1
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-36183.
What is the affected software?
The affected software is OpenImageIO v.2.4.12.0 and before.
What is the severity of CVE-2023-36183?
The severity of CVE-2023-36183 is high, with a severity value of 7.8.
How does CVE-2023-36183 work?
CVE-2023-36183 is a buffer overflow vulnerability that allows a remote attacker to execute arbitrary code and obtain sensitive information by sending a crafted file to the readimg function.
Is there a fix available for CVE-2023-36183?
Yes, a fix for CVE-2023-36183 is available. Please refer to the references for more information.