Most recent entries from all

bdu:2021-01983

cnvd-2021-25723

EUVD-2026-20818

fkie_cve-2021-3475

There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability.

GHSA-f6vh-h3m7-7676

gsd-2021-3475

OESA-2021-1167 — OpenEXR security update

Affected: openEuler:20.03-LTS-SP1: OpenEXR

OpenEXR is a high dynamic-range (HDR) image file format originally developed by Industrial Light & Magic for use in computer imaging applications. Security Fix(es): There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability.(CVE-2021-3474) There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, subsequently leading to an out-of-bounds read. The greatest risk of this flaw is to application availability.(CVE-2021-3477) There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability.(CVE-2021-3475) A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availability.(CVE-2021-20296) A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigge…

openSUSE-SU-2021:0536-1 — Security update for openexr

Security update for openexr

SUSE-SU-2021:1097-1 — Security update for openexr

Security update for openexr

UBUNTU-CVE-2021-3475

Affected: Ubuntu:16.04:LTS: openexr, Ubuntu:18.04:LTS: openexr, Ubuntu:20.04:LTS: openexr