CVE-2023-42295

An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image function of file bifs/unquantize.c

• CWE-190

• https://github.com/OpenImageIO/oiio/issues/3947Exploit, Issue Tracking, Third Party Advisory
• https://github.com/OpenImageIO/oiio/issues/3947Exploit, Issue Tracking, Third Party Advisory

Published

Oct 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42280mee-admin 1.5 is vulnerable to Directory Traversal. The down…7.5
• CVE-2023-42282The ip package before 1.1.9 for Node.js might allow SSRF bec…9.8
• CVE-2023-42283Blind SQL injection in api_id parameter in Tyk Gateway versi…9.8
• CVE-2023-42284Blind SQL injection in api_version parameter in Tyk Gateway …9.8
• CVE-2023-42286There is a PHP file inclusion vulnerability in the template …9.8
• CVE-2023-4229A vulnerability has been identified in ioLogik 4000 Series (…4.7
• CVE-2023-42298An issue in GPAC GPAC v.2.2.1 and before allows a local atta…5.5
• CVE-2023-42299Buffer Overflow vulnerability in OpenImageIO oiio v.2.4.12.0…9.8
• CVE-2023-4230A vulnerability has been identified in ioLogik 4000 Series (…5.3
• CVE-2023-42307Cross Site Scripting (XSS) vulnerability in Code-Projects Ex…6.1
• CVE-2023-42308Cross Site Scripting (XSS) vulnerability in Manage Fastrack …6.1
• CVE-2023-4231Improper Neutralization of Special Elements used in an SQL C…9.8