Lucene search

K
cvelistRedhatCVELIST:CVE-2021-20296
HistoryApr 01, 2021 - 12:00 a.m.

CVE-2021-20296

2021-04-0100:00:00
CWE-476
redhat
raw.githubusercontent.com
3

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR’s IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availability.

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.1%