Not rated
CVE-2021-23169 A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1
Description
A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenEXR | Versions not published |
References
- FEDORA-2021-c194de7719 lists.fedoraproject.org
- FEDORA-2021-6af32bfcd2 lists.fedoraproject.org
- bugzilla.redhat.com bugzilla.redhat.com
- GLSA-202210-31 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of OpenEXR
The 21 CVEs of OpenEXR →
CVE-2021-20298
A flaw was found in OpenEXR's B44Compressor
Not rated
CVE-2021-20304
A flaw was found in OpenEXR's hufDecode functionality
Not rated
CVE-2021-3941
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x -…
Not rated
CVE-2021-3933
An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits
Not rated