The vulnerability of the TiledInputFile function in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, allows attackers to trigger a service failure.

The vulnerability of the TiledInputFile function in software for storing images with a wide dynamic range of brightness in OpenEXR is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the dataWindowForTile() function in the IlmImf/ImfTiledMisc.cpp component of the OpenEXR image storage software, which supports a wide dynamic range of brightness values. This vulnerability allows attackers to compromise data integrity and cause service interruptions.

The vulnerability of the dataWindowForTile function in the IlmImf/ImfTiledMisc.cpp component of the OpenEXR image storage software, which supports a wide dynamic range of brightness values, is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data...

The vulnerability of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from integer overflow. This allows attackers to cause system failures.

The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability of software for storing images with a wide dynamic range of brightness, related to pointer swapping errors, allows attackers to trigger a service failure.

The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability in the ImfChromaticities.cpp component of the RGBtoXYZ() function for images with a wide dynamic range of brightness in OpenEXR allows a hacker to cause a service failure.

The vulnerability in the ImfChromaticities.cpp component of the RGBtoXYZ function for OpenEXR images with a wide dynamic range is related to incorrect handling of the division operation. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

The vulnerability of the hufUncompress function in the /IlmImf/ImfHuf.cpp component of the OpenEXR image storage software allows a attacker to cause a system failure.

The vulnerability of the hufUncompress function in the /IlmImf/ImfHuf.cpp component of the OpenEXR image storage software, which supports wide dynamic range brightness, is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a...

Medium: openexr

Issue Overview: A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability. CVE-2021-20304 An integer...

Amazon Linux 2023 : openexr, openexr-devel, openexr-libs (ALAS2023-2023-022)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-022 advisory. 2024-02-15: CVE-2021-20304 was added to this advisory. A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR...

SUSE CVE-2009-1720

Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to 1 the Imf::PreviewImage::PreviewImage function and...

SUSE CVE-2009-1721

The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer...

SUSE CVE-2009-1722

Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors...

SUSE CVE-2017-9110

In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash...

SUSE CVE-2017-9111

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...

SUSE CVE-2017-9113

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code...

SUSE CVE-2017-9112

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

SUSE CVE-2017-9115

In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code...

SUSE CVE-2017-9116

In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash...

SUSE CVE-2017-9114

In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash...

SUSE CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

SUSE CVE-2017-14988

Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service excessive memory allocation via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe tha...