CVE-2021-26945

CVE-2021-26945 relates to OpenEXR up to version 3.0.0, where an integer overflow leads to a heap‑buffer overflow . This could allow an attacker to crash an application linked with OpenEXR. The vulnerability is fixed in 3.0.1, so upgrading to 3.0.1 or later is the advised remediation. The availabl...

CVE-2021-26945

An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...

CVE-2021-26945

An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...

CVE-2021-26945

An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...

Industrial Light and Magic OpenEXR 输入验证错误漏洞

OpenEXR is an image file format from Industrial Light and Magic for high dynamic range HDR images. industrial Light and Magic OpenEXR is vulnerable to a resource management error that could be exploited by attackers to crash applications...

PT-2021-17191 · Openexr +1 · Openexr +1

Name of the Vulnerable Software and Affected Versions: OpenEXR versions prior to 3.0.1 Description: An integer overflow leading to a heap-buffer overflow was found in OpenEXR. This issue could be exploited by an attacker to crash an application compiled with OpenEXR. Recommendations: For versions...

CVE-2021-23169

A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR...

CVE-2021-23169

OpenEXR contains a heap-buffer overflow in the copyIntoFrameBuffer function affecting versions before 3.0.1. An attacker could potentially execute arbitrary code with the permissions of the user running the vulnerable OpenEXR-enabled application. This CVE entry identifies OpenEXR as the affected ...

CVE-2021-26260

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...

CVE-2021-26260

CVE-2021-26260 reports an integer overflow in OpenEXR’s DwaCompressor, causing a heap-buffer overflow in affected builds before 3.0.1. Multiple connected sources confirm the issue (OpenEXR library, DwaCompressor, and related advisories) and note the flaw can crash applications compiled with OpenE...

CVE-2021-23215

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...

CVE-2021-23215

CVE-2021-23215 concerns the OpenEXR library’s DwaCompressor. Affected: OpenEXR versions before 3.0.1. Description: an integer overflow leads to a heap-buffer overflow, which could cause an application crash when processing crafted EXR files. Root cause: overflow in DwaCompressor logic. Impact: de...

CVE-2021-23215

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...

CVE-2021-26260

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...

CVE-2021-23169

A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR...

CVE-2021-23215

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR...

CVE-2021-26260

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215...

openexr v3.0.5 -- fixes miscellaneous security issues

Cary Phillips reports: 1038 fix/extend part number validation in MultiPart methods 1037 verify data size in deepscanlines with NOCOMPRESSION 1036 detect buffer overflows in RleUncompress...

Denial Of Service (DoS)

openexr is vulnerable to denial of service. The vulnerability exists due to Heap-buffer-overflow in Imf25::copyIntoFrameBuffer...

openSUSE Security Update : openexr (openSUSE-2021-670)

This update for openexr fixes the following issues : - CVE-2021-23215: Fixed an integer-overflow in Imf25:DwaCompressor:initializeBuffers bsc1185216. - CVE-2021-26260: Fixed an Integer-overflow in Imf25:DwaCompressor:initializeBuffers bsc1185217. - CVE-2021-20296: Fixed a NULL pointer dereference...