CVE-2017-9111

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...

CVE-2017-9113

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code...

CVE-2017-9112

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

PT-2017-4145

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to an invalid read in the getBits function, which could cause the application to crash. It is associated with a buffer data boundary read issue in the OpenEXR library. Exploitation of this...

PT-2017-4140

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to an invalid write of size 8 in the storeSSE function, which could cause the application to crash or potentially execute arbitrary code. This allows a remote attacker to access confidenti...

CVE-2017-9115: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code...

CVE-2017-9114: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash...

CVE-2017-9116: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash...

CVE-2017-9112: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...

CVE-2017-9113: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code...

CVE-2017-9111: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...

CVE-2017-9110: Undefined Security Weakness

In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash...

PT-2017-4138

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to an invalid read operation in the refill function of the ImfFastHuf.cpp component, which could cause the application to crash. This is due to a buffer overflow in memory, allowing a remo...

PT-2017-4139

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to insufficient input validation in the bufferedReadPixels function, which could lead to an invalid write of size 1, causing the application to crash or potentially execute arbitrary code...

PT-2017-3264

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to an invalid read of size 1 in the uncompress function in ImfZip.cpp, which could cause the application to crash. It is also associated with errors in number processing. Exploitation of...

PT-2017-4137

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to an invalid write of size 2 in the = operator function in half.h, which could cause the application to crash or execute arbitrary code. It is also described as a buffer overflow...

PT-2017-4144

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0 Description The issue is related to an invalid read in the hufDecode function, which could cause the application to crash. It is associated with a buffer data boundary read issue in the OpenEXR library. Exploitation of th...

OpenEXR -- multiple remote code execution and denial of service vulnerabilities

Brandon Perry reports: There is a zip file of EXR images that cause segmentation faults in the OpenEXR library tested against 2.2.0. CVE-2017-9110 In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash. CVE-2017-9111 In OpenEXR...

The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ImageIO component in the Mac OS X operating system arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted EXR image with B44...

Apple OS X ImageIO memory corruption vulnerability (CNVD-2016-05768)

Apple OS X is a specialized operating system developed for Mac computers. A security vulnerability exists in ImageIO in Apple OS X, which can be exploited by remote attackers to execute arbitrary code or conduct denial-of-service attacks using B44 compressed EXR images...