Linux Distros Unpatched Vulnerability : CVE-2020-18428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service DOS. CVE-2020-18428...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h. Remediation There is no fixed version for tinyexr. References - Github.com - GitHub Issue...

tinyexr Buffer Overflow Vulnerability

tinyexr is a small OpenEXR image load/save library. A buffer overflow vulnerability exists in tinyexr version 0.9.5. The vulnerability can be exploited to cause an out-of-bounds read with the 'tinyexr::ReadChannelInfo' function in the tinyexr.h file...