152 matches found
The vulnerability of the getChunkOffsetTableSize() function in software for storing OpenEXR images with a wide dynamic range in brightness levels, related to out-of-buffer writing, allows attackers to cause service interruptions.
The vulnerability of the getChunkOffsetTableSize function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...
Denial Of Service
OpenEXR is vulnerable to denial of service. The vulnerability exists in MultiPartInputFile::Data::chunkOffsetReconstruction function of ImfMultiPartInputFile.cpp because of incorrectly testing for a part number which allows an attacker to cause a head-based buffer overflow via a malicious EXR fil...
Denial Of Service (DoS)
openexr:bullseye is vulnerable to denial of service. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference which causes an application crash...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. An out-of-bounds write in makeMultiView.cpp in exrmultiview leads to an assertion failure or possibly unspecified other impact...
Industrial Light and Magic OpenEXR 缓冲区错误漏洞
OpenEXR is an image file format for high dynamic range HDR images.A security vulnerability exists in OpenEXR, which stems from a flaw in the ImfDeepScanLineInputFile functionality. An attacker could use the upstairs to trigger an out-of-bounds read by submitting a harmful file to an application...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory...
Denial Of Service (DoS)
openexr is vulnerable to denial of service DoS. The vulnerability exists through a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta, that could trigger an integer overflow, subsequently leading to an out-of-bounds read...
Denial Of Service (DoS)
openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted file to be processed by OpenEXR that causes an integer overflow...
LIM OpenEXR Null Pointer Dereference Vulnerability
OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A null pointer dereference vulnerability exists in the Dwa decompression function of the IlmImf library in...
LIM OpenEXR Denial of Service Vulnerability (CNVD-2021-25721)
OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A denial of service vulnerability exists in the Scanline input file feature in versions prior to LIM OpenEX...
LIM OpenEXR 资源管理错误漏洞
OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A denial of service vulnerability exists in the Scanline API functionality in versions prior to LIM OpenEXR...
LIM OpenEXR 输入验证错误漏洞
OpenEXR is an open-standard, high dynamic range image format that is widely used in computer graphics to store image data, but can also store some data needed for post-synthesis processing. A shift overflow vulnerability exists in FastHufDecoder in versions prior to LIM OpenEXR 3.0.0-beta, which...
Arbitrary Code Execution
openexr is vulnerable to arbitrary code execution. An invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...
Industrial Light and Magic OpenEXR Resource Management Error Vulnerability
Industrial Light and Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. The IlmImf/ImfDeepScanLineInputFile.cpp file in Industrial Light and Magic OpenEXR versions prior to 2.5.2 has 'DeepScanLineInputFile:: DeepScanLineInputFile...
DEBIAN-CVE-2020-15304
An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference...
UBUNTU-CVE-2020-15305
An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile in IlmImf/ImfDeepScanLineInputFile.cpp...
Industrial Light and Magic OpenEXR Out-of-Bounds Write Vulnerability
Industrial Light and Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An out-of-bounds write vulnerability exists in the 'copyIntoFrameBuffer' function of the ImfMisc.cpp file in versions of LIM OpenEXR prior to 2.4.1, which ca...
Industrial Light and Magic OpenEXR Input Validation Error Vulnerability
Industrial Light and Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An input validation error vulnerability exists in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock in versions of LIM OpenE...
Industrial Light and Magic OpenEXR Out-of-Bounds Read Vulnerability (CNVD-2020-24151)
Industrial Light and Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An out-of-bounds read vulnerability exists in the ImfOptimizedPixelReading.h file in LIM OpenEXR versions prior to 2.4.1, which can be exploited by an attack...
Industrial Light and Magic OpenEXR Out-of-Bounds Read Vulnerability
Industrial Light and Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. An out-of-bounds read vulnerability exists in LIM OpenEXR versions prior to 2.4.1, which can be exploited by an attacker to cause an application to crash or...