Denial Of Service (DoS)

openexr:stretch is vulnerable to denial of service. The vulnerability exists in LineBufferTask::execute function of ImfDeepScanLineInputFile.cpp due to heap buffer overflow which allows an attacker to crash the application via malicious input...

OpenEXR: Multiple vulnerabilities

Background OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. Description Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact Please revi...

Security update for openexr (important)

openSUSE Security Update: Security update for openexr Announcement ID: openSUSE-SU-2021:2158-1 Rating: important References: 1187310 1187395 Cross-References: CVE-2021-3598 CVE-2021-3605 CVSS scores: CVE-2021-3598 SUSE: 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2021-3605 SUSE: 7.5...

Denial Of Service

OpenEXR is vulnerable to denial of service. The vulnerability exists in MultiPartInputFile::Data::chunkOffsetReconstruction function of ImfMultiPartInputFile.cpp because of incorrectly testing for a part number which allows an attacker to cause a head-based buffer overflow via a malicious EXR fil...

Denial Of Service (DoS)

openexr:stretch is vulnerable to denial of service. An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEX. An attacker could use this flaw to crash an application compiled with OpenEXR...

Denial Of Service (DoS)

openexr:bullseye is vulnerable to denial of service. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference which causes an application crash...

MGASA-2021-0326 Updated openexr packages fix security vulnerabilities

Updated openexr packages fix security vulnerabilities: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

Updated openexr packages fix security vulnerabilities

Updated openexr packages fix security vulnerabilities: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or possibly execute arbitrary code...

The vulnerability of the operator function in the half.h component of software for storing OpenEXR images, which has a wide dynamic range of brightness levels. This vulnerability arises from the operation exceeding the permissible buffer data size, allowing an attacker to access confidential information or cause system failures.

The vulnerability of the operator function in the half.h component of software for storing OpenEXR images with wide dynamic range of brightness levels is related to the operation exceeding the allowable buffer data size. Exploiting this vulnerability allows a malicious actor to access confidentia...

The vulnerability of the `refill` function in the `ImfFastHuf.cpp` component of the software for storing OpenEXR images with a wide dynamic range of brightness levels. This vulnerability arises from the operation of writing data beyond the buffer boundaries in memory, allowing an attacker to cause a service failure.

The vulnerability of the refill function in the ImfFastHuf.cpp component of the software for storing OpenEXR images with wide dynamic range of brightness values is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to cau...

The vulnerability of the storeSSE function in software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, allows attackers to access confidential information or cause service failures.

Vulnerability of the storeSSE function in software for storing images with wide dynamic range brightness in OpenEXR format. Exploitation of this vulnerability allows a remote attacker to access confidential information or cause service failures...

The vulnerability of the `bufferedReadPixels` function in software for storing OpenEXR images with a wide dynamic range of brightness levels arises from insufficient validation of input data. This allows attackers to trigger service failures.

The vulnerability of the bufferedReadPixels function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to cause service interruptions...

USN-4996-1: OpenEXR vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 18.04 Description It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a remote attacker could cause a denial of service, or...

AZL-44292 CVE-2021-3598 affecting package OpenEXR 2.3.0-6

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

DEBIAN-CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

CVE-2021-3598

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

Out-of-bounds

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability...

CVE-2021-3598

OpenEXR vulnerability CVE-2021-3598 affects the ImfDeepScanLineInputFile component in OpenEXR before 3.0.5. An attacker who submits a crafted EXR file to an application linked with OpenEXR can trigger an out-of-bounds read, with the greatest risk stated as impact to application availability; some...