Unscored USN-5150-1 1 CVE

openexr vulnerability

Published Nov 17, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that OpenEXR incorrectly handled certain EXR image files.
An attacker could possibly use this issue to cause a crash.

Fixed packages 2

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	openexr	2.2.0-11.1ubuntu1.9
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	openexr	2.2.0-10ubuntu2.6+esm3

Vulnerabilities 1

Unscored —

CVE-2021-3941

In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x …

openexr openexr Debian Ubuntu

Mar 25, 2022

References

report
https://ubuntu.com/security/CVE-2021-3941