Lucene search
+L

459 matches found

Tenable Nessus
Tenable Nessus
added 2025/12/24 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2025-12840

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers ...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/23 10:15 p.m.3 views

DEBIAN-CVE-2025-12495

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/23 10:15 p.m.6 views

DEBIAN-CVE-2025-12840

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/23 10:15 p.m.4 views

DEBIAN-CVE-2025-12839

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2025/12/23 10:15 p.m.6 views

CVE-2025-12839

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS7.5AI score0.00189EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/23 10:15 p.m.5 views

UBUNTU-CVE-2025-12839

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS6.2AI score0.00189EPSS
SaveExploits0References3
OSV
OSV
added 2025/12/23 10:15 p.m.5 views

UBUNTU-CVE-2025-12495

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS6.2AI score0.00189EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2025/12/23 9:41 p.m.10 views

CVE-2025-12840

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits0
CVE
CVE
added 2025/12/23 9:41 p.m.31 views

CVE-2025-12840

CVE-2025-12840 affects Academy Software Foundation OpenEXR. The issue is a heap-based buffer overflow in EXR file parsing caused by a lack of proper validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution when a user opens a malicious EXR fil...

7.8CVSS7.7AI score0.00189EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2025/12/23 9:41 p.m.11 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the EXR file parsing process due to improper validation of user-supplied data length before copying it to a heap-based buffer. An attacker can execute arbitrary code in the context of the current process by...

8.5CVSS7.9AI score0.00189EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/12/23 9:41 p.m.2 views

Heap-based Buffer Overflow

Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the EXR file parsing process due to improper validation of user-supplied data length before copying it to a heap-based buffer. An attacker can...

8.5CVSS7.9AI score0.00189EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/12/23 9:41 p.m.10 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the parsing process of EXR files due to improper validation of user-supplied data length. An attacker can achieve arbitrary code execution by tricking a user into opening a specially crafted malicious EXR...

8.5CVSS8.1AI score0.00189EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/12/23 9:41 p.m.12 views

CVE-2025-12839

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits0
CVE
CVE
added 2025/12/23 9:41 p.m.43 views

CVE-2025-12839

CVE-2025-12839 affects Academy Software Foundation OpenEXR (EXR parsing) with a heap-based buffer overflow that enables remote code execution when a user opens a malicious EXR file/page. Root cause is inadequate validation of user-supplied data length during EXR parsing. In connected advisories, ...

7.8CVSS7.7AI score0.00189EPSS
SaveExploits0References1Affected Software1
Snyk
Snyk
added 2025/12/23 9:41 p.m.5 views

Heap-based Buffer Overflow

Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the parsing process of EXR files due to improper validation of user-supplied data length. An attacker can achieve arbitrary code execution by...

8.5CVSS8.1AI score0.00189EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2025/12/23 9:41 p.m.41 views

CVE-2025-12839

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS7.8AI score0.00189EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/23 9:41 p.m.14 views

CVE-2025-12839 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS6.5AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/12/23 9:41 p.m.1 views

CVE-2025-12495 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS7.2AI score0.00189EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/23 9:41 p.m.38 views

CVE-2025-12495 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this...

7.8CVSS0.00189EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/23 9:41 p.m.38 views

CVE-2025-12495

CVE-2025-12495 is an OpenEXR heap-based buffer overflow in EXR file parsing that can lead to remote code execution. Exploitation described requires user interaction (visit a malicious page or open a malicious file). The connected advisories show affected packages in Fedora (mingw-openexr and open...

7.8CVSS7.7AI score0.00189EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder