Lucene search
+L

2442 matches found

CNVD
CNVD
added 2021/07/27 12:0 a.m.48 views

tinyexr denial of service vulnerability

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

7.5CVSS4.2AI score0.01267EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/07/27 12:0 a.m.33 views

tinyexr Denial of Service Vulnerability (CNVD-2021-94957)

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::SaveEXR component. An attacker could exploit this vulnerability to cause a denial of...

7.5CVSS4.2AI score0.01233EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/07/26 12:0 a.m.5 views

tinyexr 输入验证错误漏洞

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

7.5CVSS5.7AI score0.01267EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.8 views

The vulnerability of the hufDecode function in the OpenEXR library, which involves reading beyond the allowable buffer data limits, allows attackers to cause service interruptions.

The vulnerability of the hufDecode function in the OpenEXR library lies in the reading of data beyond the permissible buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.9AI score0.01725EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.7 views

The vulnerability of the hufDecode function in the OpenEXR library, which involves reading beyond the allowable buffer data limits, allows attackers to access confidential information or cause service failures.

The vulnerability of the hufDecode function in the OpenEXR library lies in reading data beyond the acceptable buffer limits during the execution of exrmaketiled;. Exploiting this vulnerability can allow a remote attacker to access confidential information or cause service failures...

8.8CVSS7.2AI score0.01868EPSS
SaveExploits1References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/07/22 12:0 a.m.9 views

The vulnerability of the getBits function in the OpenEXR library, which is related to reading data from buffers beyond their allowable limits, allows attackers to cause service interruptions.

The vulnerability of the getBits function in the OpenEXR library lies in reading data beyond the permissible limits of the data buffer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.9AI score0.01851EPSS
SaveExploits0References8Affected Software3
NVD
NVD
added 2021/07/21 6:15 p.m.23 views

CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

5.5CVSS0.0083EPSS
SaveExploits1References2
OSV
OSV
added 2021/07/21 6:15 p.m.15 views

CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

5.5CVSS7.1AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/07/21 6:15 p.m.28 views

CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

5.5CVSS6.1AI score0.0083EPSS
SaveExploits1References3
OSV
OSV
added 2021/07/21 6:15 p.m.47 views

UBUNTU-CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

5.5CVSS6.1AI score0.0083EPSS
SaveExploits1References4
Prion
Prion
added 2021/07/21 6:15 p.m.18 views

Integer overflow

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

4.3CVSS5.5AI score0.0083EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/07/21 5:15 p.m.41 views

CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

5.6AI score0.0083EPSS
SaveExploits1References2
CVE
CVE
added 2021/07/21 5:15 p.m.57 views

CVE-2020-19490

CVE-2020-19490 affects tinyexr 0.9.5. The vulnerability is an integer overflow overwrite in tinyexr::DecodePixelData defined in tinyexr.h, related to OpenEXR code. The connected documents do not provide explicit impact details, and no remediation patch/version is stated in the provided data.

5.5CVSS5.5AI score0.0083EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2021/07/21 5:15 p.m.56 views

CVE-2020-19490

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...

5.5CVSS5.5AI score0.0083EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/07/21 12:0 a.m.9 views

Industrial Light And Magic(lim) OpenEXR 输入验证错误漏洞

Industrial Light And Magic lim OpenEXR is an image file format for high dynamic range HDR images from Industrial Light and Magic LIM Industrial Light And Magic lim, USA. A security vulnerability exists in OpenEXR version 0.9.5, which stems from an integer overflow override in...

5.5CVSS5.8AI score0.0083EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.14 views

The vulnerability of the writeTileData function in the OpenEXR library, related to writing beyond the buffer boundary, allows a attacker to cause a service failure.

The vulnerability of the writeTileData function in the OpenEXR library lies in the issue of writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.5CVSS6.9AI score0.01134EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/07/20 12:0 a.m.10 views

The vulnerability of the generatePreview function in the OpenEXR library, related to pointer dereferencing errors, allows a hacker to trigger a service failure.

The vulnerability of the generatePreview function in the OpenEXR library is related to pointer dereferencing errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

6.5CVSS6.8AI score0.01204EPSS
SaveExploits1References13Affected Software5
Veracode
Veracode
added 2021/07/19 8:20 p.m.34 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. A NULL pointer dereference in Imf25::Header::operator allows an attacker to crash the application via a malicious multi-part input file...

7.5CVSS4AI score0.0174EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
added 2021/07/17 7:12 p.m.10 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. The OpenEXR/IlmImf/ImfB44Compressor.cpp uses a temporary buffer tmpBuffer and allocates twice the size to the buffer, resulting in a denial of service condition...

7.5CVSS6.6AI score0.01224EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
added 2021/07/17 2:11 p.m.47 views

Denial Of Service (DoS)

openexr is vulnerable to denial of service. An integer overflow in OpenEXR/IlmImf/ImfHuf.cpp allows an attacker to crash the application...

5.5CVSS4AI score0.0089EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder