3307 matches found
OpenEXR Heap Buffer Overflow DoS
The vulnerability of the writeTileData function in the OpenEXR library lies in the issue of writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. A NULL pointer dereference in Imf25::Header::operator allows an attacker to crash the application via a malicious multi-part input file...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. The OpenEXR/IlmImf/ImfB44Compressor.cpp uses a temporary buffer tmpBuffer and allocates twice the size to the buffer, resulting in a denial of service condition...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. An integer overflow in OpenEXR/IlmImf/ImfHuf.cpp allows an attacker to crash the application...
Denial Of Service
openexr is vulnerable to denial of service. The vulnerability exists due to a floating-point exception error...
Denial Of Service
openexr is vulnerable to denial of service. The vulnerability exists due to an out-of-bounds write on the heap...
Denial Of Service (DoS)
openexr is vulnerable to denial of service. An attacker is able to cause a denial of service condition in the application via a malicious input file that would result in a undefined bitwise right shift...
openSUSE 15 Security Update : openexr (openSUSE-SU-2021:2158-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:2158-1 advisory. - There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafte...
CVE-2021-20299
A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability...
CVE-2021-20298
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability...
CVE-2021-20300
A flaw was found in OpenEXR's hufUncompress function in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability...
CVE-2021-20303
There is a flaw in OpenEXR's dataWindowForTile function. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to application availability, with some potenti...
CVE-2021-20302
A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability...
CVE-2021-20304
A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...
OpenEXR ImfTileOffsets Heap Buffer Overflow DoS
The vulnerability of the ImfTileOffsets.cpp library in software for storing images with wide dynamic range brightness in OpenEXR is related to the operation being performed within acceptable buffer data limits. Exploiting this vulnerability could allow a malicious actor to cause service failures...
OpenEXR ImfOptimizedPixelReading Buffer Overflow DoS
The vulnerability of the ImfOptimizedPixelReading.h library, which is used in software for storing images with wide dynamic range brightness in OpenEXR format, relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service...
OpenEXR readSampleCountForLineBlock Integer Overflow DoS
The vulnerability of the readSampleCountForLineBlock function in software for storing OpenEXR images with wide dynamic range brightness values is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
OpenEXR ImfDwaCompressor Buffer Overflow
The vulnerability of the ImfDwaCompressor.cpp library, a software component for image storage with wide dynamic range brightness in OpenEXR format, lies in the execution of operations that exceed the allowable buffer data size limits. Exploiting this vulnerability could allow an attacker to cause...
OpenEXR Buffer Overflow DoS
The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause service interruptions...
OpenEXR ImfMisc.cpp Buffer Overflow DoS
The vulnerability in the ImfMisc.cpp library of the OpenEXR image storage software lies in the handling of operations that exceed the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...