Openexr : Security Vulnerabilities, CVEs, Published In 2017
Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid
Max CVSS
5.5
EPSS Score
0.19%
Published
2017-10-03
Updated
2024-04-11
In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact.
Max CVSS
7.8
EPSS Score
0.61%
Published
2017-08-07
Updated
2020-08-30
In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash.
Max CVSS
6.5
EPSS Score
0.37%
Published
2017-05-21
Updated
2020-08-30
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
Max CVSS
8.8
EPSS Score
1.09%
Published
2017-05-21
Updated
2020-08-30
In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash.
Max CVSS
6.5
EPSS Score
0.37%
Published
2017-05-21
Updated
2020-08-30
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
Max CVSS
8.8
EPSS Score
1.09%
Published
2017-05-21
Updated
2020-08-30
In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash.
Max CVSS
6.5
EPSS Score
0.37%
Published
2017-05-21
Updated
2020-08-30
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.
Max CVSS
8.8
EPSS Score
1.09%
Published
2017-05-21
Updated
2020-08-30
In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash.
Max CVSS
6.5
EPSS Score
0.37%
Published
2017-05-21
Updated
2020-08-30
9 vulnerabilities found