CVE-2020-16587

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...

Null pointer dereference

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file...

CVE-2020-16588

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file...

CVE-2020-16587

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file...

CVE-2020-16587

OpenEXR 2.3.0 (ImfMultiPartInputFile.cpp, chunkOffsetReconstruction) contains a heap-based buffer overflow that can cause a denial of service when processing a crafted EXR file. Public advisories (e.g., Debian DLA/OpenEXR entries) list CVE-2020-16587 among affected issues and document patched ver...

CVE-2020-16588

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file...

CVE-2020-16588

The CVE-2020-16588 entry concerns a Null Pointer Deference in OpenEXR 2.3.0 (generatePreview in makePreview.cpp) that can lead to denial of service via a crafted EXR file. Connected sources show multiple distributions releasing fixes (e.g., Debian openexr updates addressing CVE-2020-16588; openSU...

CVE-2020-16589

A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file...

CVE-2020-16589

OpenEXR 2.3.0 is affected by a head-based buffer overflow in writeTileData (ImfTiledOutputFile.cpp) that can cause a denial of service when processing crafted EXR files. This CVE is CVE-2020-16589. The vulnerability is documented in multiple sources within the connected documents (e.g., Astra Lin...

Out-of-Bounds Read

OpenEXR is vulnerable to Out-of-Bounds read. The vulnerability exist because of an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read...

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists in the DwaCompressor::uncompress in ImfDwaCompressor.cpp due to the out-of-bounds read and write when handling the UNKNOWN compression, allowing an attacker to crash the application...

Out-of-Bounds Read

OpenEXR is vulnerable to out-of-bounds read. The vulnerability exists in ImfOptimizedPixelReading.h...

Out-Of-Bounds Read

openexr is vulnerable to out-of-bounds reads. The vulnerability exists in rleUncompress in ImfRle.cpp during RLE uncompression...

Integer Overflow

OpenEXR is vulnerable to integer overflow. An attacker can write to an out-of-bounds pointer causing an integer overflow...

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution allows an attacker to crash the application and cause other unspecified impact...

Denial Of Service (DoS)

OpenEXR is vulnerable to denial of service. The vulnerability exist because of an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An invalid read of size 1 in the getBits function in ImfHuf.cpp allows an attacker to crash the application...

Arbitrary Code Execution

openexr is vulnerable to arbitrary code execution. An invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...

Denial Of Service (DoS)

OpenEXR is vulnerable to denial of service. An invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash...

Arbitrary Code Execution

openexr is vulnerable to arbitrary code execution. An invalid write of size 2 in the = operator function in half.h could allow an attacker to crash the application or execute arbitrary code on the host OS...