CVE-2017-9115

OpenEXR: Out-of-bounds write in the = operator function

In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.

CVSS 3.0 · 8.8 High EPSS 3.3% KEV · Not listed

Vendors

Openexr

Products

Openexr

CVE-2017-9116

OpenEXR: Out-of-bounds read in the uncompress function

In OpenEXR 2.2.0, an invalid read of size 1 in the uncompress function in ImfZip.cpp could cause the application to crash.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Openexr

Products

Openexr

CVE-2021-45942

OpenEXR: heap-based buffer overflow in Imf_3_1:LineCompositeTask:execute

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Fedoraproject Openexr

Products

Debian Linux Fedora Openexr

CVE-2021-3941

openexr: Divide-by-zero in Imf_3_1::RGBtoXYZ

In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Openexr and 1 more

Products

Debian Linux Fedora Openexr and 1 more

CVE-2021-3933

openexr: Integer-overflow in Imf_3_1::bytesPerDeepLineTable

An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Openexr

Products

Debian Linux Fedora Openexr

CVE-2021-3605

OpenEXR: Heap buffer overflow in the rleUncompress function

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Openexr Redhat

Products

Debian Linux Openexr Enterprise Linux

CVE-2021-3598

OpenEXR: Heap buffer overflow in Imf_3_1::CharPtrIO::readChars

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Openexr Redhat

Products

Debian Linux Openexr Enterprise Linux

CVE-2021-3479

OpenEXR: Out-of-memory caused by allocation of a very large buffer

There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Openexr

Products

Debian Linux Openexr

CVE-2021-3478

OpenEXR: Out-of-memory in ScanLineInputFile

There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory. The greatest impact of this flaw is to system availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Openexr

Products

Debian Linux Openexr

CVE-2021-3477

OpenEXR: Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts

There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, subsequently leading to an out-of-bounds read. The greatest risk of this flaw is to application availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Openexr

Products

Debian Linux Openexr

CVE-2021-3476

OpenEXR: Undefined-shift in Imf_2_5::unpack14

A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Openexr

Products

Debian Linux Openexr

CVE-2021-3475

OpenEXR: Integer-overflow in Imf_2_5::calculateNumTiles

There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Openexr

Products

Debian Linux Openexr

CVE-2021-3474

OpenEXR: Undefined-shift in Imf_2_5::FastHufDecoder::FastHufDecoder

There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability.

CVSS 3.1 · 5.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Debian Openexr

Products

Debian Linux Openexr

CVE-2021-26945

OpenEXR: Integer-overflow in bool Imf_2_5::readDeepTile<Imf_2_5::DeepTiledInputPart>

An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Openexr

Products

Openexr

CVE-2021-26260

OpenEXR: Integer-overflow in Imf_2_5::DwaCompressor::initializeBuffers

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Debian Fedoraproject Openexr

Products

Debian Linux Fedora Openexr

CVE-2021-23215

OpenEXR: Integer-overflow in Imf_2_5::DwaCompressor::initializeBuffers

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed

Vendors

Debian Fedoraproject Openexr

Products

Debian Linux Fedora Openexr

CVE-2021-23169

OpenEXR: Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer

A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.

CVSS 3.1 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Fedoraproject Openexr

Products

Fedora Openexr

CVE-2021-20304

OpenEXR: Undefined-shift in Imf_2_5::hufDecode

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed

Vendors

Openexr

Products

Openexr

CVE-2021-20303

OpenEXR: Heap-buffer-overflow in Imf_2_5::copyIntoFrameBuffer

A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to application availability, with some potential impact to data integrity as well.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Openexr

Products

Debian Linux Openexr

CVE-2021-20302

OpenEXR: Floating-point-exception in Imf_2_5::precalculateTileInfot

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Openexr

Products

Debian Linux Openexr