Summary
It was discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image file,
a remote attacker could cause a denial of service, or possibly execute
arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | openexr | 2.2.0-10ubuntu2.3 |
| Ubuntu · 18.04 LTS 18.04:LTS | openexr | 2.2.0-11.1ubuntu1.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | openexr | 2.3.0-6ubuntu0.2 |
Vulnerabilities 2
-
Unscored —
An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::D…
-
Unscored —
An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes could cause a heap buffer overflow in g…