Summary
It was discovered that OpenEXR incorrectly handled certain malformed EXR
image files. If a user were tricked into opening a crafted EXR image file,
a remote attacker could cause a denial of service, or possibly execute
arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | openexr | 2.2.0-10ubuntu2.4 |
| Ubuntu · 18.04 LTS 18.04:LTS | openexr | 2.2.0-11.1ubuntu1.4 |
| Ubuntu · 20.04 LTS 20.04:LTS | openexr | 2.3.0-6ubuntu0.3 |
Vulnerabilities 3
-
Unscored —
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruc…
-
Unscored —
A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cp…
-
Unscored —
A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile…