Lucene search
+L

3291 matches found

CNVD
CNVD
•added 2024/02/04 12:00 a.m.•21 views

OpenEX Buffer Overflow Vulnerability

OpenEXR is an open standard for high dynamic range image HDR file formats. A buffer overflow vulnerability exists in OpenEXR 3.2.1 and prior versions that stems from an inability to validate the number of scanline samples that contain deep scanline data. An attacker could exploit this vulnerabili...

9.1CVSS6.8AI score0.01248EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2024/02/02 2:11 p.m.•49 views

CVE-2023-5841

A vulnerability was found in the Academy Software Foundation OpenEXR and requires that a malicious EXR file image is parsed by the target device or environment using OpenEXR. This issue occurs due to a failure in validating the number of scanline samples of an OpenEXR file containing deep scanlin...

9.1CVSS8.7AI score0.01248EPSS
SaveExploits1References4
OSV
OSV
•added 2024/02/01 7:15 p.m.•16 views

AZL-62324 CVE-2023-5841 affecting package OpenEXR 2.3.0-6

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS8.2AI score0.01248EPSS
SaveExploits1References1
NVD
NVD
•added 2024/02/01 7:15 p.m.•19 views

CVE-2023-5841

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS9.4AI score0.01248EPSS
SaveExploits1References6
OSV
OSV
•added 2024/02/01 7:15 p.m.•7 views

DEBIAN-CVE-2023-5841

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS8.6AI score0.01248EPSS
SaveExploits1References1
OSV
OSV
•added 2024/02/01 7:15 p.m.•11 views

UBUNTU-CVE-2023-5841

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS6AI score0.01248EPSS
SaveExploits1References6
UbuntuCve
UbuntuCve
•added 2024/02/01 7:15 p.m.•30 views

CVE-2023-5841

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS7.4AI score0.01248EPSS
SaveExploits1References5
Prion
Prion
•added 2024/02/01 7:15 p.m.•22 views

Heap overflow

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

6.4CVSS9.2AI score0.01248EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/02/01 6:28 p.m.•39 views

CVE-2023-5841 OpenEXR Heap Overflow in Scanline Deep Data Parsing

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.5AI score0.01248EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
•added 2024/02/01 6:28 p.m.•22 views

CVE-2023-5841

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS9.4AI score0.01248EPSS
SaveExploits1
CVE
CVE
•added 2024/02/01 6:28 p.m.•133 views

CVE-2023-5841

The CVE-2023-5841 issue affects Academy Software Foundation OpenEXR image parsing library (OpenEXR) versions 3.2.1 and older, where a heap-based buffer overflow can occur due to improper validation of the number of scanline samples in a file containing deep scanline data. The root cause, as descr...

9.1CVSS9.3AI score0.01248EPSS
SaveExploits1References6Affected Software1
Mend
Mend
•added 2024/02/01 6:28 p.m.•5 views

CVE-2023-5841

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.3CVSS0.01248EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
•added 2024/02/01 6:28 p.m.•6 views

CVE-2023-5841 OpenEXR Heap Overflow in Scanline Deep Data Parsing

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.3AI score0.01248EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2024/02/01 6:28 p.m.•49 views

CVE-2023-5841

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS9.4AI score0.01248EPSS
SaveExploits1
osv-cve
osv-cve
•added 2024/02/01 6:28 p.m.•29 views

CVE-2023-5841 OpenEXR Heap Overflow in Scanline Deep Data Parsing

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS7.4AI score
SaveExploits0References8
CNNVD
CNNVD
•added 2024/02/01 12:00 a.m.•11 views

OpenEXR 缓冲区错误漏洞

OpenEXR is an open standard for high dynamic range image HDR file formats. A buffer overflow vulnerability exists in OpenEXR 3.2.1 and prior versions that stems from an inability to validate the number of scanline samples that contain deep scanline data. An attacker could exploit this vulnerabili...

9.1CVSS7.2AI score0.01248EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/01 12:00 a.m.•3 views

CVE-2023-5841: Heap-based Buffer Overflow

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2...

9.1CVSS8.3AI score0.01248EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/02/01 12:00 a.m.•13 views

PT-2024-2330

Name of the Vulnerable Software and Affected Versions Academy Software Foundation OpenEXR image parsing library versions 3.2.1 and prior Description The issue is caused by a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, leading to a heap-bas...

9.1CVSS8.3AI score0.01248EPSS
SaveExploits1References56
Github Security Blog
Github Security Blog
•added 2023/12/12 1:20 p.m.•39 views

memory overflow vulnerability in OpenEXR-viewer

Just open this exr file through openexr-viewer. poc send by email This is windbg log file. POC 2 8660.7e44: Access violation - code c0000005 !!! second chance !!! openexrviewer+0x27be4: 00007ff713ff7be4 c744880c0000803f mov dword ptr rax+rcx4+0Ch,3F800000h ds:0000020a3ac8000c=???????? Attempt to...

9.8CVSS7.2AI score0.0105EPSS
SaveExploits1References4Affected Software1
osv-ghsa
osv-ghsa
•added 2023/12/12 1:20 p.m.•32 views

GHSA-99JG-R3F4-RPXJ memory overflow vulnerability in OpenEXR-viewer

Just open this exr file through openexr-viewer. poc send by email This is windbg log file. POC 2 8660.7e44: Access violation - code c0000005 !!! second chance !!! openexrviewer+0x27be4: 00007ff713ff7be4 c744880c0000803f mov dword ptr rax+rcx4+0Ch,3F800000h ds:0000020a3ac8000c=???????? Attempt to...

9.8CVSS9.6AI score0.0105EPSS
SaveExploits1References4
Rows per page
Query Builder