Heap overflow

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. NOTE: db217f2 may be inapplicable...

CVE-2021-45942: Out-of-bounds Write

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf31::LineCompositeTask::execute called from IlmThread31::NullThreadPoolProvider::addTask and IlmThread31::ThreadPool::addGlobalTask. NOTE: db217f2 may be inapplicable...

OSV-2021-1627 Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41416 Crash type: Heap-buffer-overflow WRITE 2 Crash state: Imf31::LineCompositeTask::execute IlmThread31::NullThreadPoolProvider::addTask IlmThread31::ThreadPool::addGlobalTask...

PT-2021-27914

Name of the Vulnerable Software and Affected Versions OpenImageIO affected versions not specified Description The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE 2. The crash state involves the Imf 3...

OSV-2021-443 Segv on unknown address in Imf_2_5::copyIntoFrameBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31293 Crash type: Segv on unknown address Crash state: Imf25::copyIntoFrameBuffer Imf25::LineBufferTask::execute IlmThread::NullThreadPoolProvider::addTask...

OSV-2020-1809 UNKNOWN WRITE in Imf_2_5::copyIntoFrameBuffer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25770 Crash type: UNKNOWN WRITE Crash state: Imf25::copyIntoFrameBuffer Imf25::LineBufferTask::execute IlmThread25::NullThreadPoolProvider::addTask...

PT-2020-21981

Name of the Vulnerable Software and Affected Versions OpenImageIO versions affected versions not specified Description A crash occurs due to an unknown write issue. The crash involves the Imf 2 5::copyIntoFrameBuffer function, Imf 2 5::LineBufferTask::execute function, and IlmThread 2...