209 matches found
CVE-2020-19490
tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code...
CVE-2020-18428
tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service DOS...
CVE-2018-12688
tinyexr 0.9.5 has a segmentation fault in the wav2Decode function...
CVE-2018-12504
tinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h...
CVE-2018-12064
tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h...
Fedora 37 : godot (2023-5225a85559)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-5225a85559 advisory. This updates provides Godot 4.1.2 as the latest stable release for this free and open source game engine. It fixes many bugs, improves features and usability...
Fedora 38 : tinyexr (2023-3e092b3938)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-3e092b3938 advisory. Upstream patch to fix CVE-2022-34300 Fixes rhbz2233636 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
SUSE CVE-2022-38529
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the component rleUncompress. Remediation Upgrade tinyexr to version 1.0.6 or higher. References - GitHub Commit - GitHub Issue - GitHub PR Credit: 0xdd96...
DEBIAN-CVE-2022-38529
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
CVE-2022-38529
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
CVE-2022-38529
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
CVE-2022-38529
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
UBUNTU-CVE-2022-38529
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
CVE-2022-38529
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
Heap overflow
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
CVE-2022-38529
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress...
CVE-2022-38529
CVE-2022-38529 corresponds to tinyexr where a heap-buffer overflow exists in rleUncompress due to commit 0647fb3. The CVSSv3.1 base score is 7.8 (HIGH) with LOCAL attack vector and user interaction required. Connected sources corroborate the same flaw across NVD, OSV, Debian/Ubuntu trackers and N...
