PT-2021-27843

Name of the Vulnerable Software and Affected Versions OpenEXR affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE 2. The crash state involves several function calls:...

PT-2021-27835

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves the Imf 3 1::memstream read, dispatch read, and exr read...

PT-2021-27838

Name of the Vulnerable Software and Affected Versions OpenEXR affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving functions such as unpack...

PT-2021-27834

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read, which occurs in the internal huf decompress function, specifically during the internal exr undo piz an...

PT-2021-27832

Name of the Vulnerable Software and Affected Versions OpenEXR affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE 4. The crash state involves several function calls:...

PT-2021-27830

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow write error. Technical details include a crash type of Heap-buffer-overflow WRITE 2, with the crash state...

PT-2021-27829

Name of the Vulnerable Software and Affected Versions OpenEXR affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving functions such as unpack...

PT-2021-27827

Name of the Vulnerable Software and Affected Versions OpenEXR affected versions not specified Description A heap buffer overflow issue was identified, potentially leading to a crash. The crash occurs in the unpack 16bit function, which is called by exr decoding run and ultimately by Imf 3...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in unpack_16bit

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4937985242562560 Project: openexr Fuzzing Engine: afl Fuzz Target: openexrexrcheckfuzzer Job Type: aflasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash...

CVE-2021-40715

Adobe Premiere Pro version 15.4 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a special...

CVE-2021-40715

Adobe Premiere Pro version 15.4 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a special...

CVE-2021-40715 Adobe Premiere Pro 2021 EXR File Parsing Leads to Memory Corruption

Adobe Premiere Pro version 15.4 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a special...

CVE-2021-40715: Access of Memory Location After End of Buffer

Adobe Premiere Pro version 15.4 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a special...

PT-2021-27814

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 6 crash has been reported. The crash occurs in the following functions: dispatch print error, internal exr parse header, and exr...

PT-2021-27812

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. The crash occurs in the following functions: dispatch print error, internal exr parse header, a...

CVE-2021-40715

Adobe Premiere Pro version 15.4 and earlier is affected by a memory corruption vulnerability due to insecure handling of a malicious .exr file, potentially resulting in arbitrary code execution in the context of the current user. User interaction is required in that the victim must open a special...

PT-2021-4211

Name of the Vulnerable Software and Affected Versions Adobe Premiere Pro versions 15.4 and earlier Description The issue is caused by a buffer overflow in memory, potentially allowing a remote attacker to execute arbitrary code using a specially crafted media file. This can happen when a user ope...

The vulnerability of the DwaCompressor::Classifier::Classifier function in software for storing images with wide dynamic range brightness in OpenEXR, related to a single offset error, allows attackers to cause service interruptions.

The vulnerability of the DwaCompressor::Classifier::Classifier function in software for storing images with wide dynamic range brightness in OpenEXR is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the DeepScanLineInputFile() function in software for storing images with wide dynamic range brightness in OpenEXR, related to memory usage after deallocation, allows a hacker to cause a service failure.

The vulnerability of the DeepScanLineInputFile function in software for storing images in OpenEXR format with a wide dynamic range of brightness levels is related to the use of memory areas after they are freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

Denial Of Service

OpenEXR is vulnerable to denial of service. The vulnerability exists in MultiPartInputFile::Data::chunkOffsetReconstruction function of ImfMultiPartInputFile.cpp because of incorrectly testing for a part number which allows an attacker to cause a head-based buffer overflow via a malicious EXR fil...