648 matches found
CVE-2020-16587
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...
CVE-2020-16588
The CVE-2020-16588 entry concerns a Null Pointer Deference in OpenEXR 2.3.0 (generatePreview in makePreview.cpp) that can lead to denial of service via a crafted EXR file. Connected sources show multiple distributions releasing fixes (e.g., Debian openexr updates addressing CVE-2020-16588; openSU...
ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Null-dereference READ with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=4770472801337344 Project: ffmpeg Fuzzing Engine: libFuzzer Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: libfuzzerubsanffmpeg Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: NULL Sanitizer:...
PT-2020-5886 · Openexr +4 · Openexr +4
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: The issue is related to the implementation of the scanline input file functionality in the OpenEXR library, specifically in the ImfScanLineInputFile.cpp file. It involves an uncontrolled...
PT-2020-6259 · Academy Software Foundation +5 · Openexr +5
Name of the Vulnerable Software and Affected Versions: Academy Software Foundation OpenEXR version 2.3.0 Description: A Null Pointer Deference issue exists in the generatePreview function in makePreview.cpp that can cause a denial of service via a crafted EXR file. This issue is related to errors...
ffmpeg:ffmpeg_AV_CODEC_ID_EXR_fuzzer: Heap-buffer-overflow in decode_frame
Project: https://git.ffmpeg.org/ffmpeg.git Detailed Report: https://oss-fuzz.com/testcase?key=5613925708857344 Project: ffmpeg Fuzzing Engine: afl Fuzz Target: ffmpegAVCODECIDEXRfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x6170000002cf...
PT-2020-6180
Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to the decode frame function in the libavcodec/exr.c component, which has an out-of-bounds write due to errors in calculations. This can be exploited by a remote attacker to cause a denial ...
PT-2020-6859 · Openexr +3 · Openexr +3
Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw found in the dataWindowForTile function of IlmImf/ImfTiledMisc.cpp can trigger an integer overflow when a crafted file is processed, leading to an out-of-bounds write on the heap. Th...
Debian DLA-2358-1 : openexr security update
Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files. For Debian 9 stretch, these problems have been fixed in version 2.2.0-11+deb9u1. We recommend that y...
Apple macOS ImageIO EXR Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Interaction with the ImageIO library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the ImageIO...
USN-4418-1 openexr vulnerabilities
It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : OpenEXR vulnerabilities (USN-4339-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4339-1 advisory. Brandon Perry discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening ...
USN-4339-1 openexr vulnerabilities
Brandon Perry discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 20.04 LTS...
DEBIAN-CVE-2020-11762
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case...
CVE-2019-17255
IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836...
CVE-2019-17255
IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836...
CVE-2019-17257
IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80...
Code injection
IrfanView 4.53 allows a Exception Handler Chain to be Corrupted starting at EXR!ReadEXR+0x000000000002af80...