OESA-2021-1238 OpenEXR security update

🗓️ 26 Jun 2021 11:02:59Reported by GoogleType

osv

osv🔗 osv.dev👁 1 Views

OpenEXR security update fixes heap overflow in DwaCompressor and framebuffer code prior to 3.0.1.

Reporter	Title	Published	Views	Family All 125
AlpineLinux	CVE-2021-23169	8 Jun 202100:00	–	alpinelinux
AlpineLinux	CVE-2021-23215	8 Jun 202100:00	–	alpinelinux
AlpineLinux	CVE-2021-26260	8 Jun 202100:00	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в openexr	20 May 202605:53	–	astralinux
AstraLinux	Astra Linux - уязвимость в openexr	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the copyIntoFrameBuffer function in software for storing OpenEXR images with a wide dynamic range of brightness levels, related to writing beyond the buffer’s boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.	20 Sep 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DwaCompressor component of the image storage software for OpenEXR files, which has a wide dynamic range of brightness levels, leads to uncontrolled resource consumption. This allows attackers to cause system failures.	27 Oct 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DwaCompressor component of the image storage software for OpenEXR files, which has a wide dynamic range of brightness levels, leads to uncontrolled resource consumption. This allows attackers to cause system failures.	2 Nov 202100:00	–	bdu_fstec
Cloud Foundry	USN-4996-1: OpenEXR vulnerabilities \| Cloud Foundry	8 Jul 202100:00	–	cloudfoundry
CNNVD	Industrial Light and Magic OpenEXR 资源管理错误漏洞	5 May 202100:00	–	cnnvd

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-26260
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23215
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23169

03 Sep 2025 06:17Current

7.9High risk

Vulners AI Score7.9

CVSS 26.8

CVSS 3.18.8

EPSS0.00571

DwaCompressor overflow framebuffer overflow code execution before 3.0.1