Lucene search
+L

62 matches found

OSV
OSV
•added 2026/08/25 12:45 a.m.•24 views

CVE-2026-59183 OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32t multiplication in OpenEXRCore's unpacksampletable can overflow while decoding...

5.5CVSS5.6AI score
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-55059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12...

6.1CVSS6.1AI score0.00148EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-54920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12...

5.7AI score0.00356EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/25 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-53532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12...

7.1CVSS5.7AI score0.00445EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/08/24 11:16 p.m.•17 views

CVE-2026-53532

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

7.1CVSS5.7AI score0.00445EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/04/13 2:30 a.m.•19 views

Important: Red Hat Security Advisory: openexr security update

An update for openexr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

8.4CVSS7.4AI score0.00221EPSS
SaveExploits2References2
AlpineLinux
AlpineLinux
•added 2026/04/01 8:56 p.m.•29 views

CVE-2026-34543

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data information disclosure...

8.7CVSS5.8AI score0.00517EPSS
SaveExploits1
Snyk
Snyk
•added 2025/12/23 9:41 p.m.•10 views

Heap-based Buffer Overflow

Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the EXR file parsing process due to improper validation of user-supplied data length before copying it to a heap-based buffer. An attacker can...

8.5CVSS7.6AI score0.00192EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2016-5616

Malware in sbrugna...

8.8CVSS8.1AI score0.03576EPSS
SaveExploits2References7
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•5 views

Linux Distros Unpatched Vulnerability : CVE-2020-18430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service DOS. CVE-2020-18430...

7.5CVSS7.1AI score0.01233EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 10:12 a.m.•12 views

CVE-2024-22526

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

5.5CVSS6.7AI score0.00407EPSS
SaveExploits0References1
NVD
NVD
•added 2024/04/12 7:15 a.m.•21 views

CVE-2024-22526

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

5.5CVSS6.3AI score0.00407EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/04/12 12:00 a.m.•13 views

Bandisoft bandiview 安全漏洞

Bandisoft bandiview is an image viewer and editor software from the Korean company Bandisoft. A security vulnerability exists in Bandisoft bandiview version v7.0, which originates from the presence of a buffer overflow vulnerability that could allow a local attacker to cause a denial of service D...

5.5CVSS6.7AI score0.00407EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/04/12 12:00 a.m.•15 views

CVE-2024-22526

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

6.8AI score0.00407EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/12 12:00 a.m.•6 views

CVE-2024-22526: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

5.5CVSS5.8AI score0.00407EPSS
SaveExploits0References2
CVE
CVE
•added 2024/04/12 12:00 a.m.•74 views

CVE-2024-22526

A buffer overflow vulnerability exists in bandisoft bandiview v7.0 . This flaw allows a local attacker to trigger a denial of service (DoS) by processing a specially crafted exr image file . The root cause is identified as a buffer copy without checking the input size. While the vulnerability is ...

5.5CVSS6.5AI score0.00407EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/04/12 12:00 a.m.•33 views

CVE-2024-22526

Buffer Overflow vulnerability in bandisoft bandiview v7.0, allows local attackers to cause a denial of service DoS via exr image file...

6.5AI score0.00407EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/20 6:15 a.m.•15 views

CVE-2024-28563

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the Imf22::DwaCompressor::Classifier::Classifier function when reading images in EXR format...

5.9CVSS5.6AI score
SaveExploits0References4
OSV
OSV
•added 2024/03/20 6:15 a.m.•16 views

UBUNTU-CVE-2024-28569

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the Imf22::Xdr::read function when reading images in EXR format...

7.8CVSS6.2AI score0.00343EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/03/20 12:00 a.m.•14 views

FreeImage Security Vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A security vulnerability exists in FreeImage version v.3.19.0, which stems from the presence of a buffer overflow vulnerability. A local attacker can exploit this vulnerability to cause a denial of...

5.9CVSS6.8AI score0.0046EPSS
SaveExploits1References2
Rows per page
Query Builder