Use After Free

Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Use After Free via the PyObjectStealAttrString function. An attacker can execute arbitrary code or cause a crash by passing a dangling pointer to APIs such as PyLongAsLong o...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the channels and channel functions in the legacy Python adapter. An attacker can cause application crashes or achieve code execution by opening specially crafted EXR files or passing malicious Python objects...

cv-depot (>=0.4.2 <=0.12.0), flatiron (>=0.20.1 <=0.26.0) +5 more potentially affected by CVE-2017-9111 via openexr (>=1.3.2 <=1.3.9)

openexr PYPI version =1.3.2, =0.4.2, =0.20.1, =0.4.0, =1.5.0, =1.6.2, =1.6.5 Source cves: CVE-2017-9111 Source advisory: OSV:GHSA-QXH9-R8XW-7V99...