2 matches found
PT-2021-4553 · Openexr +4 · Openexr +4
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.1 Description: The issue is related to an integer overflow leading to a heap-buffer overflow in the DwaCompressor component of OpenEXR. This flaw can be exploited by an attacker to cause a denial of service,...
CVE-2019-17255
IrfanView 4.53 allows a User Mode Write AV starting at EXR!ReadEXR+0x0000000000010836...