648 matches found
PT-2021-4211
Name of the Vulnerable Software and Affected Versions Adobe Premiere Pro versions 15.4 and earlier Description The issue is caused by a buffer overflow in memory, potentially allowing a remote attacker to execute arbitrary code using a specially crafted media file. This can happen when a user ope...
The vulnerability of the DwaCompressor::Classifier::Classifier function in software for storing images with wide dynamic range brightness in OpenEXR, related to a single offset error, allows attackers to cause service interruptions.
The vulnerability of the DwaCompressor::Classifier::Classifier function in software for storing images with wide dynamic range brightness in OpenEXR is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the DeepScanLineInputFile() function in software for storing images with wide dynamic range brightness in OpenEXR, related to memory usage after deallocation, allows a hacker to cause a service failure.
The vulnerability of the DeepScanLineInputFile function in software for storing images in OpenEXR format with a wide dynamic range of brightness levels is related to the use of memory areas after they are freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
Denial Of Service
OpenEXR is vulnerable to denial of service. The vulnerability exists in MultiPartInputFile::Data::chunkOffsetReconstruction function of ImfMultiPartInputFile.cpp because of incorrectly testing for a part number which allows an attacker to cause a head-based buffer overflow via a malicious EXR fil...
The vulnerability of the decode_frame function in the libavcodec/exr.c component of the FFmpeg multimedia library involves an operation that outputs values within acceptable buffer data limits. This allows a malicious actor to cause a service failure.
The vulnerability of the decodeframe function in the libavcodec/exr.c component is related to errors in calculations. Exploiting this vulnerability allows a remote attacker to cause a service failure...
[ASA-202107-14] openexr: arbitrary code execution
Arch Linux Security Advisory ASA-202107-14 ========================================== Severity: Medium Date : 2021-07-06 CVE-ID : CVE-2021-3598 Package : openexr Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2071 Summary ======= The package openexr before...
USN-4996-2: OpenEXR vulnerabilities
USN-4996-1 fixed several vulnerabilities in OpenEXR. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a...
USN-4996-1 openexr vulnerabilities
It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...
UBUNTU-CVE-2021-33815
dwauncompress in libavcodec/exr.c in FFmpeg 4.4 allows an out-of-bounds array access because dccount is not strictly checked...
FFmpeg 输入验证错误漏洞
FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg, which stems from dwauncompress in libavcodec/exr.c that does not strictly check dccount, and can be exploited by an attacker to cross-border array access...
The vulnerability of the calculateNumTiles() function (OpenEXR/IlmImf/ImfTiledMisc.cpp) in the OpenEXR library, which allows a hacker to trigger a service failure.
The vulnerability of the calculateNumTiles function OpenEXR/IlmImf/ImfTiledMisc.cpp in the OpenEXR library is related to integer overflow when processing input files. Exploiting this vulnerability can allow a malicious actor to cause service failures by creating specially crafted EXR files...
ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Crash in decode_frame
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5545462457303040 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x60f000000540 Crash State:...
USN-4900-1: OpenEXR vulnerabilities
It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...
ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Heap-buffer-overflow in huf_decode
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=4847008469876736 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x612000000a0...
LIM OpenEXR 输入验证错误漏洞
Industrial Light And Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An input validation error vulnerability exists in OpenEXR B44 uncompression, which can be exploited by an attacker to trigger a shift overflow and potentiall...
ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Heap-buffer-overflow in huf_decode
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5773234709594112 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address:...
CVE-2020-16588
A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file...
CVE-2020-16587
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...
PT-2021-4553 · Openexr +4 · Openexr +4
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.1 Description: The issue is related to an integer overflow leading to a heap-buffer overflow in the DwaCompressor component of OpenEXR. This flaw can be exploited by an attacker to cause a denial of service,...
USN-4676-1 openexr vulnerabilities
It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...