CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

CVE-2020-19490

CVE-2020-19490 affects tinyexr 0.9.5. The vulnerability is an integer overflow overwrite in tinyexr::DecodePixelData defined in tinyexr.h, related to OpenEXR code. The connected documents do not provide explicit impact details, and no remediation patch/version is stated in the provided data.

CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

Industrial Light And Magic（lim） OpenEXR 输入验证错误漏洞

Industrial Light And Magic lim OpenEXR is an image file format for high dynamic range HDR images from Industrial Light and Magic LIM Industrial Light And Magic lim, USA. A security vulnerability exists in OpenEXR version 0.9.5, which stems from an integer overflow override in...

The vulnerability of the generatePreview function in the OpenEXR library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the generatePreview function in the OpenEXR library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the writeTileData function in the OpenEXR library, related to writing beyond the buffer boundary, allows a attacker to cause a service failure.

The vulnerability of the writeTileData function in the OpenEXR library lies in the issue of writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. A NULL pointer dereference in Imf25::Header::operator allows an attacker to crash the application via a malicious multi-part input file...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. The OpenEXR/IlmImf/ImfB44Compressor.cpp uses a temporary buffer tmpBuffer and allocates twice the size to the buffer, resulting in a denial of service condition...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An integer overflow in OpenEXR/IlmImf/ImfHuf.cpp allows an attacker to crash the application...

Denial Of Service

openexr is vulnerable to denial of service. The vulnerability exists due to a floating-point exception error...

Denial Of Service

openexr is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds write on the heap...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An attacker is able to cause a denial of service condition in the application via a malicious input file that would result in a undefined bitwise right shift...

openSUSE 15 Security Update : openexr (openSUSE-SU-2021:2158-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2158-1 advisory. - There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafte...

CVE-2021-20299

A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability...

CVE-2021-20298

A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability...

CVE-2021-20300

A flaw was found in OpenEXR's hufUncompress function in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability...

CVE-2021-20303

There is a flaw in OpenEXR's dataWindowForTile function. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to application availability, with some potenti...

CVE-2021-20302

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...