Denial Of Service (DoS)

OpenEXR is vulnerable to denial of service. An out-of-bounds read during Huffman uncompression allows an attacker to crash the application...

OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp...

OpenEXR: out-of-bounds read during Huffman uncompression

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp...

Moderate: Red Hat Security Advisory: OpenEXR security update

An update for OpenEXR is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp...

RHEL 7 : OpenEXR (RHSA-2020:4039)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4039 advisory. OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. This...

PT-2020-6982 · Openexr +2 · Openexr +2

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: The issue is related to a buffer overflow in the B44Compressor component of OpenEXR, which is used for storing images with high dynamic range. An attacker can exploit this by submitting a...

PT-2020-6855 · Openexr +3 · Openexr +3

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw was found in OpenEXR's TiledInputFile functionality, allowing an attacker to trigger a floating-point exception error by submitting a crafted single-part non-image. This flaw is...

openexr:openexr_scanlines_fuzzer: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4721411661496320 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrscanlinesfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash...

openexr:openexr_scanlines_fuzzer: Crash in Imf_2_5::copyIntoFrameBuffer

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5099738956038144 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrscanlinesfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

PT-2020-6860 · Openexr +3 · Openexr +3

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this...

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists as an invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile in IlmImf/ImfDeepScanLineInputFile.cpp...

Heap Buffer Overflow

openexr is vulnerable to heap buffer overflow. An Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize in IlmImf/ImfMisc.cpp...

Denial Of Service (DoS)

OpenEXR is vulnerable to denial of service. A NULL pointer dereference in the function TiledInputFile::TiledInputFile in IlmImf/ImfTiledInputFile.cpp allows an attacker to cause a denial of service condition via an invalid tiled input file...

PT-2020-6857 · Openexr +3 · Openexr +3

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp, allowing an attacker to trigger an integer overflow by submitting a crafted file. The highest threat...

openexr:openexr_scanlines_fuzzer: Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5647879652507648 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrscanlinesfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow...

openexr:openexr_scanlines_fuzzer: Heap-buffer-overflow in Imf_2_5::FastHufDecoder::FastHufDecoder

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5715033768853504 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrscanlinesfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

PT-2020-5885 · Openexr +5 · Openexr +5

Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.0-beta Description: The issue is related to a flaw in OpenEXR's Scanline API functionality, which can lead to excessive consumption of memory when a crafted file is processed. This can result in an impact to syst...

Debian DLA-2358-1 : openexr security update

Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files. For Debian 9 stretch, these problems have been fixed in version 2.2.0-11+deb9u1. We recommend that y...

Debian: Security Advisory (DLA-2358-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...