OpenEXR getChunkOffsetTableSize Buffer Overflow DoS

The vulnerability of the getChunkOffsetTableSize function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

openSUSE: Security Advisory for openexr (openSUSE-SU-2021:2158-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2021:2158-1 Security update for openexr

This update for openexr fixes the following issues: - Fixed CVE-2021-3605 bsc1187395: Heap buffer overflow in the rleUncompress function - Fixed CVE-2021-3598 bsc1187310: Heap buffer overflow in Imf31:CharPtrIO:readChars...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An integer overflow leading to a heap-buffer overflow. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...

Denial Of Service (DoS)

openexr:stretch is vulnerable to denial of service. The vulnerability exists in LineBufferTask::execute function of ImfDeepScanLineInputFile.cpp due to heap buffer overflow which allows an attacker to crash the application via malicious input...

Security update for openexr (important)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:2158-1 Rating: important References: 1187310 1187395 Cross-References: CVE-2021-3598 CVE-2021-3605 CVSS scores: CVE-2021-3598 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-3605 SUSE: 7.5...

OpenEXR: Multiple vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact Please revi...

Denial Of Service

OpenEXR is vulnerable to denial of service. The vulnerability exists in MultiPartInputFile::Data::chunkOffsetReconstruction function of ImfMultiPartInputFile.cpp because of incorrectly testing for a part number which allows an attacker to cause a head-based buffer overflow via a malicious EXR fil...

Denial Of Service (DoS)

openexr:stretch is vulnerable to denial of service. An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEX. An attacker could use this flaw to crash an application compiled with OpenEXR...

Denial Of Service (DoS)

openexr:bullseye is vulnerable to denial of service. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference which causes an application crash...

Updated openexr packages fix security vulnerabilities

Updated openexr packages fix security vulnerabilities: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

MGASA-2021-0326 Updated openexr packages fix security vulnerabilities

Updated openexr packages fix security vulnerabilities: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

USN-4996-1: OpenEXR vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or...

half.h Heap Buffer Overflow Info Disclosure

The vulnerability of the operator function in the half.h component of software for storing OpenEXR images with wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability allows a malicious actor to access confidentia...

ImfFastHuf Heap Buffer Overflow DoS

The vulnerability of the refill function in the ImfFastHuf.cpp component of the software for storing OpenEXR images with wide dynamic range of brightness values is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cau...

OpenEXR buffer overflow DoS

The vulnerability of the bufferedReadPixels function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service interruptions...

OpenEXR storeSSE Confidential Information DoS

Vulnerability of the storeSSE function in software for storing images with wide dynamic range brightness in OpenEXR format. Exploitation of this vulnerability allows a remote attacker to access confidential information or cause service failures...

CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

DEBIAN-CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...