Lucene search
+L

2475 matches found

BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.12 views

The vulnerability of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the acceptable buffer limit. This allows attackers to cause service failures.

The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause service interruptions...

6.5CVSS6.9AI score0.01807EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.14 views

The vulnerability of the readSampleCountForLineBlock function in software for storing OpenEXR images with wide dynamic range brightness levels, related to integer overflow, allows a malicious actor to cause service interruptions.

The vulnerability of the readSampleCountForLineBlock function in software for storing OpenEXR images with wide dynamic range brightness values is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.8AI score0.01696EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.10 views

The vulnerability of the getChunkOffsetTableSize() function in software for storing OpenEXR images with a wide dynamic range in brightness levels, related to out-of-buffer writing, allows attackers to cause service interruptions.

The vulnerability of the getChunkOffsetTableSize function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.9AI score0.00464EPSS
SaveExploits0References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.12 views

The vulnerability of the ImfOptimizedPixelReading.h library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the acceptable buffer limit. This allows attackers to cause service interruptions.

The vulnerability of the ImfOptimizedPixelReading.h library, which is used in software for storing images with wide dynamic range brightness in OpenEXR format, relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service...

6.5CVSS6.9AI score0.01793EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.12 views

The vulnerability in the ImfMisc.cpp library of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from writing beyond the buffer boundaries. This allows an attacker to cause a service failure.

The vulnerability in the ImfMisc.cpp library of the OpenEXR image storage software lies in the handling of operations that exceed the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

6.5CVSS7AI score0.01785EPSS
SaveExploits1References11Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.14 views

The vulnerability of the ImfDwaCompressor.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels. This vulnerability stems from reading data beyond the allowable buffer size, allowing attackers to cause system failures.

The vulnerability of the ImfDwaCompressor.cpp library, a software component for image storage with wide dynamic range brightness in OpenEXR format, lies in the execution of operations that exceed the allowable buffer data size limits. Exploiting this vulnerability could allow an attacker to cause...

6.5CVSS7.1AI score0.01807EPSS
SaveExploits1References11Affected Software3
OpenVAS
OpenVAS
added 2021/07/13 12:0 a.m.23 views

openSUSE: Security Advisory for openexr (openSUSE-SU-2021:2158-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS6.1AI score0.01007EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/07/13 12:0 a.m.9 views

The vulnerability of the ImfTileOffsets.cpp library in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from reading data beyond the allowable buffer size. This allows attackers to cause system failures.

The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...

6.5CVSS6.9AI score0.01793EPSS
SaveExploits1References11Affected Software3
OSV
OSV
added 2021/07/11 12:38 p.m.5 views

OPENSUSE-SU-2021:2158-1 Security update for openexr

This update for openexr fixes the following issues: - Fixed CVE-2021-3605 bsc1187395: Heap buffer overflow in the rleUncompress function - Fixed CVE-2021-3598 bsc1187310: Heap buffer overflow in Imf31:CharPtrIO:readChars...

5.5CVSS6.1AI score0.01007EPSS
SaveExploits1References5
Veracode
Veracode
added 2021/07/11 10:12 a.m.32 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An integer overflow leading to a heap-buffer overflow. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...

5.5CVSS5.5AI score0.01153EPSS
SaveExploits0References7Affected Software2
Veracode
Veracode
added 2021/07/11 12:48 a.m.34 views

Denial Of Service (DoS)

openexr:stretch is vulnerable to denial of service. The vulnerability exists in LineBufferTask::execute function of ImfDeepScanLineInputFile.cpp due to heap buffer overflow which allows an attacker to crash the application via malicious input...

5.5CVSS5.7AI score0.00428EPSS
SaveExploits1References5Affected Software2
OPENSUSE Linux
OPENSUSE Linux
added 2021/07/11 12:0 a.m.31 views

Security update for openexr (important)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:2158-1 Rating: important References: 1187310 1187395 Cross-References: CVE-2021-3598 CVE-2021-3605 CVSS scores: CVE-2021-3598 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-3605 SUSE: 7.5...

7.5CVSS6.8AI score0.01007EPSS
SaveExploits1References2
Gentoo Linux
Gentoo Linux
added 2021/07/11 12:0 a.m.164 views

OpenEXR: Multiple vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact Please revi...

5.5CVSS7.1AI score0.01848EPSS
SaveExploits8
Veracode
Veracode
added 2021/07/10 6:43 p.m.33 views

Denial Of Service

OpenEXR is vulnerable to denial of service. The vulnerability exists in MultiPartInputFile::Data::chunkOffsetReconstruction function of ImfMultiPartInputFile.cpp because of incorrectly testing for a part number which allows an attacker to cause a head-based buffer overflow via a malicious EXR fil...

5.5CVSS5.6AI score0.01239EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2021/07/10 6:13 p.m.41 views

Denial Of Service (DoS)

openexr:stretch is vulnerable to denial of service. An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEX. An attacker could use this flaw to crash an application compiled with OpenEXR...

5.5CVSS3.9AI score0.01153EPSS
SaveExploits0References7Affected Software2
Veracode
Veracode
added 2021/07/10 1:42 p.m.6 views

Denial Of Service (DoS)

openexr:bullseye is vulnerable to denial of service. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference which causes an application crash...

5.3CVSS6.3AI score0.01747EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2021/07/10 12:56 p.m.15 views

MGASA-2021-0326 Updated openexr packages fix security vulnerabilities

Updated openexr packages fix security vulnerabilities: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

8.8CVSS6.4AI score0.02291EPSS
SaveExploits1References6
Mageia
Mageia
added 2021/07/10 12:56 p.m.51 views

Updated openexr packages fix security vulnerabilities

Updated openexr packages fix security vulnerabilities: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

8.8CVSS3AI score0.02291EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2021/07/08 12:0 a.m.12 views

The vulnerability of the operator function in the half.h component of software for storing OpenEXR images, which has a wide dynamic range of brightness levels. This vulnerability arises from the operation exceeding the permissible buffer data size, allowing an attacker to access confidential information or cause system failures.

The vulnerability of the operator function in the half.h component of software for storing OpenEXR images with wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability allows a malicious actor to access confidentia...

8.8CVSS7.8AI score0.0331EPSS
SaveExploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/08 12:0 a.m.8 views

The vulnerability of the `refill` function in the `ImfFastHuf.cpp` component of the software for storing OpenEXR images with a wide dynamic range of brightness levels. This vulnerability arises from the operation of writing data beyond the buffer boundaries in memory, allowing an attacker to cause a service failure.

The vulnerability of the refill function in the ImfFastHuf.cpp component of the software for storing OpenEXR images with wide dynamic range of brightness values is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cau...

6.5CVSS7.1AI score0.02001EPSS
SaveExploits0References10Affected Software3
Rows per page
Query Builder