Lucene search
+L

152 matches found

CNVD
CNVD
added 2020/04/15 12:00 a.m.5 views

Industrial Light and Magic OpenEXR Buffer Overflow Vulnerability (CNVD-2020-24153)

Industrial Light and Magic LIM OpenEXR is an image file format from Industrial Light and Magic LIM, USA, for high dynamic range HDR images. A buffer overflow vulnerability exists in the 'rleUncompress' function of the ImfRle.cpp file in versions of LIM OpenEXR prior to 2.4.1, which originates whe...

5.5CVSS7.3AI score0.01807EPSS
SaveExploits1References1
OSV
OSV
added 2020/04/14 11:15 p.m.2 views

DEBIAN-CVE-2020-11759

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer...

5.5CVSS6.7AI score0.01696EPSS
SaveExploits1References1
OSV
OSV
added 2020/04/14 11:15 p.m.15 views

AZL-44448 CVE-2020-11762 affecting package OpenEXR 2.3.0-6

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case...

5.5CVSS6.7AI score0.01807EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2020/04/14 12:00 a.m.12 views

PT-2020-6216 · Ilmbase +4 · Openexr +4

Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 2.4.1 Description: The issue is related to integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock functions, allowing an attacker to write to an out-of-bounds pointer...

8.8CVSS6.5AI score0.0331EPSS
SaveExploits14References110
CNVD
CNVD
added 2018/10/19 12:00 a.m.11 views

LIM OpenEXR Buffer Overflow Vulnerability

LIM OpenEXR is an image file format developed by Industrial Light and Magic LIM in the United States for high dynamic range HDR images. A security vulnerability exists in the makeMultiView.cpp file for exrmultiview in LIM OpenEXR version 2.3.0. An attacker can exploit this vulnerability to cause ...

8.8CVSS8.5AI score0.02615EPSS
SaveExploits1References1
OSV
OSV
added 2017/10/03 1:29 a.m.9 views

CVE-2017-14988

Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe tha...

5.5CVSS5.3AI score
SaveExploits0References2
OSV
OSV
added 2017/10/03 1:29 a.m.6 views

DEBIAN-CVE-2017-14988

Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe tha...

5.5CVSS6.8AI score0.01011EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/07 1:29 a.m.7 views

DEBIAN-CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

7.8CVSS7.4AI score0.01868EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/08/07 12:00 a.m.47 views

OpenEXR 'hufDecode' Function Denial of Service Vulnerability

OpenEXR is an image file format for high dynamic range HDR images. A denial-of-service vulnerability exists in the 'hufDecode' function of the IlmImf/ImfHuf.cpp file of OpenEXR, which allows remote attackers to exploit the vulnerability to construct a malicious file, which can be parsed by the us...

7.8CVSS8AI score0.01868EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/05/23 12:00 a.m.24 views

LIM OpenEXR Denial of Service Vulnerability (CNVD-2017-07512)

LIM OpenEXR is an image file format developed by Industrial Light and Magic LIM in the United States for high dynamic range HDR images. A denial of service vulnerability exists in the 'bufferedReadPixels' function of the ImfInputFile.cpp file in LIM OpenEXR version 2.2.0. An attacker can exploit...

8.8CVSS8.8AI score0.03143EPSS
SaveExploits0References1
OSV
OSV
added 2009/07/31 7:00 p.m.9 views

CVE-2009-1722

Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors...

8AI score
SaveExploits0References15
OSV
OSV
added 2009/07/31 7:00 p.m.13 views

CVE-2009-1721

The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer...

7.6AI score
SaveExploits0References29
Rows per page
Query Builder