2479 matches found
Medium: OpenEXR
Issue Overview: A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability. CVE-2021-20298 A flaw foun...
PT-2023-35850 · Git +1 · Openexr
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash involves the internal huf decompress, DwaCompressor uncompress, and internal exr undo dw...
OpenEXR -- heap buffer overflow in internal_huf_decompress
oss-fuzz reports: heap buffer overflow in internalhufdecompress. Cary Phillips reports: v3.1.9 - Patch release that addresses ... also OSS-fuzz 59382 Heap-buffer-overflow in internalhufdecompress Kimball Thurston reports: Fix scenario where malformed dwa file could read past end of buffer - fixes...
The vulnerability of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from integer overflow. This allows attackers to cause system failures.
The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...
The vulnerability of the TiledInputFile function in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, allows attackers to trigger a service failure.
The vulnerability of the TiledInputFile function in software for storing images with a wide dynamic range of brightness in OpenEXR is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability of the dataWindowForTile() function in the IlmImf/ImfTiledMisc.cpp component of the OpenEXR image storage software, which supports a wide dynamic range of brightness values. This vulnerability allows attackers to compromise data integrity and cause service interruptions.
The vulnerability of the dataWindowForTile function in the IlmImf/ImfTiledMisc.cpp component of the OpenEXR image storage software, which supports a wide dynamic range of brightness values, is related to integer overflow. Exploiting this vulnerability could allow an attacker to compromise data...
The vulnerability of software for storing images with a wide dynamic range of brightness, related to pointer swapping errors, allows attackers to trigger a service failure.
The vulnerability of software for storing images with a wide dynamic range of brightness in OpenEXR is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service interruptions...
The vulnerability in the ImfChromaticities.cpp component of the RGBtoXYZ() function for images with a wide dynamic range of brightness in OpenEXR allows a hacker to cause a service failure.
The vulnerability in the ImfChromaticities.cpp component of the RGBtoXYZ function for OpenEXR images with a wide dynamic range is related to incorrect handling of the division operation. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...
The vulnerability of the hufUncompress function in the /IlmImf/ImfHuf.cpp component of the OpenEXR image storage software allows a attacker to cause a system failure.
The vulnerability of the hufUncompress function in the /IlmImf/ImfHuf.cpp component of the OpenEXR image storage software, which supports wide dynamic range brightness, is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a...
Medium: openexr
Issue Overview: A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability. CVE-2021-20304 An integer...
Amazon Linux 2023 : openexr, openexr-devel, openexr-libs (ALAS2023-2023-022)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-022 advisory. 2024-02-15: CVE-2021-20304 was added to this advisory. A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR...
SUSE CVE-2009-1720
Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors that trigger heap-based buffer overflows, related to 1 the Imf::PreviewImage::PreviewImage function and...
SUSE CVE-2009-1721
The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger a free of an uninitialized pointer...
SUSE CVE-2009-1722
Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service application crash or possibly execute arbitrary code via unspecified vectors...
SUSE CVE-2017-9110
In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash...
SUSE CVE-2017-9111
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code...
SUSE CVE-2017-9113
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code...
SUSE CVE-2017-9112
In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash...