Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 78

Export CSV
CVE-2021-20300

OpenEXR: Integer-overflow in Imf_2_5::hufUncompress

A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Openexr
Products
Debian Linux Openexr
CVE-2021-20299

OpenEXR: Null-dereference READ in Imf_2_5::Header::operator

A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Debian Openexr
Products
Debian Linux Openexr
CVE-2021-20298

OpenEXR: Out-of-memory in B44Compressor

A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all memory accessible to the application. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 7.5 High EPSS 1.6% KEV · Not listed
Vendors
Debian Openexr
Products
Debian Linux Openexr
CVE-2021-20296

OpenEXR: Segv on unknown address in Imf_2_5::hufUncompress - Null Pointer dereference

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availability.

CVSS 3.1 · 5.3 Medium EPSS 1.7% KEV · Not listed
Vendors
Debian Openexr
Products
Debian Linux Openexr
CVE-2020-16589

OpenEXR: A heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp could result in a DOS via a crafted EXR file

A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file.

CVSS 3.1 · 5.5 Medium EPSS 1.1% KEV · Not listed
Vendors
Debian Openexr
Products
Debian Linux Openexr
CVE-2020-16588

OpenEXR: A Null Pointer Deference in generatePreview in makePreview.cpp could result in a DOS via a crafted EXR file

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.

CVSS 3.1 · 5.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Debian Openexr
Products
Debian Linux Openexr
CVE-2020-16587

OpenEXR: A heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp could result in a DOS via a crafted EXR file

A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file.

CVSS 3.1 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Debian Openexr
Products
Debian Linux Openexr
CVE-2020-15306

OpenEXR: Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp

An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in getChunkOffsetTableSize() in IlmImf/ImfMisc.cpp.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2020-15305

OpenEXR: Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp

An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Fedoraproject and 2 more
Products
Ubuntu Linux Debian Linux Fedora and 2 more
CVE-2020-15304

OpenEXR: An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp

An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Openexr Opensuse
Products
Fedora Openexr Leap
CVE-2020-11765

OpenEXR: off-by-one error in ImfXdr.h read function by DwaCompressor::Classifier::Classifier leading to an out-of-bounds read

An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11764

OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Icloud Ipados Iphone Os and 10 more
CVE-2020-11763

OpenEXR: std:: vector out-of-bounds read and write in ImfTileOffsets.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 4 more
Products
Icloud Ipados Iphone Os and 10 more
CVE-2020-11762

OpenEXR: out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read and write in DwaCompressor::uncompress in ImfDwaCompressor.cpp when handling the UNKNOWN compression case.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11761

OpenEXR: out-of-bounds read during Huffman uncompression

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11760

OpenEXR: out-of-bounds read during RLE uncompression in rleUncompress function in ImfRle.cpp

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp.

CVSS 3.1 · 5.5 Medium EPSS 1.8% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more
CVE-2020-11759

OpenEXR: out-of-bounds write due to integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer.

CVSS 3.1 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Apple Canonical Debian and 2 more
Products
Icloud Ipados Iphone Os and 8 more
CVE-2020-11758

OpenEXR: out-of-bounds read in ImfOptimizedPixelReading.h

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.

CVSS 3.1 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Apple Canonical Debian and 3 more
Products
Icloud Ipados Iphone Os and 9 more