Not rated
CVE-2021-20304 A flaw was found in OpenEXR's hufDecode functionality
Description
A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenEXR | Versions not published |
References
- bugs.chromium.org bugs.chromium.org
- github.com github.com
- github.com github.com
- bugzilla.redhat.com bugzilla.redhat.com
- access.redhat.com access.redhat.com
- GLSA-202210-31 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of OpenEXR
The 21 CVEs of OpenEXR →
CVE-2021-20298
A flaw was found in OpenEXR's B44Compressor
Not rated
CVE-2021-3933
An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits
Not rated
CVE-2021-3941
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x -…
Not rated
CVE-2021-20299
A flaw was found in OpenEXR's Multipart input file functionality
Not rated