OSV-2021-1470 Heap-buffer-overflow in hufDecode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40091 Crash type: Heap-buffer-overflow READ 1 Crash state: hufDecode internalhufdecompress internalexrundopiz...

PT-2022-9180 · Openexr +1 · Openexr +1

Name of the Vulnerable Software and Affected Versions: OpenEXR affected versions not specified Description: A flaw in OpenEXR's hufDecode functionality allows an attacker to trigger an undefined right shift error by passing a crafted file to be processed by OpenEXR. The highest threat from this...

The vulnerability of the hufDecode function in the OpenEXR library, which involves reading beyond the allowable buffer data limits, allows attackers to cause service interruptions.

The vulnerability of the hufDecode function in the OpenEXR library lies in the reading of data beyond the permissible buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the hufDecode function in the OpenEXR library, which involves reading beyond the allowable buffer data limits, allows attackers to access confidential information or cause service failures.

The vulnerability of the hufDecode function in the OpenEXR library lies in reading data beyond the acceptable buffer limits during the execution of exrmaketiled;. Exploiting this vulnerability can allow a remote attacker to access confidential information or cause service failures...

CVE-2021-20304

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability...

Denial Of Service (DoS)

openexr is vulnerable to denial of service DoS. The vulnerability exists through a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution allows an attacker to crash the application and cause other unspecified impact...

Denial Of Service (DoS)

OpenEXR is vulnerable to denial of service. The vulnerability exist because of an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash...

EulerOS 2.0 SP3 : OpenEXR (EulerOS-SA-2019-2638)

According to the versions of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash.CVE-2017-9110 - In...

EulerOS 2.0 SP2 : OpenEXR (EulerOS-SA-2019-2469)

According to the version of the OpenEXR package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash.CVE-2017-9110 Note that...

Updated OpenEXR packages fix security vulnerability

In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash CVE-2017-9110. In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash CVE-2017-9112. In OpenEXR 2.2.0, an invali...

Heap overflow

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

UBUNTU-CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

DEBIAN-CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

AZL-69682 CVE-2017-12596 affecting package OpenEXR 2.3.0-6

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact...

OpenEXR 'hufDecode' Function Denial of Service Vulnerability

OpenEXR is an image file format for high dynamic range HDR images. A denial-of-service vulnerability exists in the 'hufDecode' function of the IlmImf/ImfHuf.cpp file of OpenEXR, which allows remote attackers to exploit the vulnerability to construct a malicious file, which can be parsed by the us...