3239 matches found
CVE-2021-26945
An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...
CVE-2021-26945
An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...
CVE-2021-26945
An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...
CVE-2021-26945
CVE-2021-26945 relates to OpenEXR up to version 3.0.0, where an integer overflow leads to a heap‑buffer overflow . This could allow an attacker to crash an application linked with OpenEXR. The vulnerability is fixed in 3.0.1, so upgrading to 3.0.1 or later is the advised remediation. The availabl...
CVE-2021-26945
An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...
CVE-2021-26260
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...
CVE-2021-26945: Uncontrolled Resource Consumption
An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...
PT-2021-17191
Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.1 Description: An integer overflow leading to a heap-buffer overflow was found in OpenEXR. This issue could be exploited by an attacker to crash an application compiled with OpenEXR. Recommendations: For versions...
CVE-2021-26260: Uncontrolled Resource Consumption
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...
Industrial Light and Magic OpenEXR 输入验证错误漏洞
OpenEXR is an image file format from Industrial Light and Magic for high dynamic range HDR images. industrial Light and Magic OpenEXR is vulnerable to a resource management error that could be exploited by attackers to crash applications...
CVE-2021-26260
CVE-2021-26260 reports an integer overflow in OpenEXR’s DwaCompressor, causing a heap-buffer overflow in affected builds before 3.0.1. Multiple connected sources confirm the issue (OpenEXR library, DwaCompressor, and related advisories) and note the flaw can crash applications compiled with OpenE...
CVE-2021-23169
A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR...
CVE-2021-26260
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...
CVE-2021-23215
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...
CVE-2021-26260
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...
CVE-2021-23169
OpenEXR contains a heap-buffer overflow in the copyIntoFrameBuffer function affecting versions before 3.0.1. An attacker could potentially execute arbitrary code with the permissions of the user running the vulnerable OpenEXR-enabled application. This CVE entry identifies OpenEXR as the affected ...
CVE-2021-23215: Uncontrolled Resource Consumption
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...
CVE-2021-23215
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...
CVE-2021-23215
CVE-2021-23215 concerns the OpenEXR library’s DwaCompressor. Affected: OpenEXR versions before 3.0.1. Description: an integer overflow leads to a heap-buffer overflow, which could cause an application crash when processing crafted EXR files. Root cause: overflow in DwaCompressor logic. Impact: de...
CVE-2021-23215
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...