CVE-2018-18444

CVE-2018-18444 affects OpenEXR 2.3.0 via an out-of-bounds write in exrmultiview/makeMultiView.cpp, leading to an assertion failure or possibly other impact. The issue is documented in multiple advisories and has been addressed in OpenEXR 2.4.0 (and later). Recommendation: upgrade to a patched rel...

CVE-2018-18443

CVE-2018-18443 affects OpenEXR 2.3.0, with a memory leak in ThreadPool (IlmBase/IlmThread/IlmThreadPool.cpp) demonstrated by exrmultiview. The vulnerability is documented in OpenEXR context and is reflected in vendor advisories that updated ilmbase/OpenEXR packages to fixed releases (e.g., Mageia...