Page 4 of 41 results (0.007 seconds)

CVSS: 5.5EPSS: 0%CPEs: 42EXPL: 1

CVE-2020-11764 – OpenEXR: out-of-bounds write in copyIntoFrameBuffer function in ImfMisc.cpp

https://notcve.org/view.php?id=CVE-2020-11764

14 Apr 2020 — An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp. Se detectó un problema en OpenEXR versiones anteriores a 2.4.1. Se presenta una escritura fuera de límites en la función copyIntoFrameBuffer en el archivo ImfMisc.cpp. OpenEXR is a high dynamic-range image file format developed by Industrial Light & Magic for use in computer imaging applications. • http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html • CWE-787: Out-of-bounds Write •

CVSS: 5.5EPSS: 0%CPEs: 45EXPL: 1

CVE-2020-11765 – Debian Security Advisory 4755-1

https://notcve.org/view.php?id=CVE-2020-11765

14 Apr 2020 — An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read. Se detectó un problema en OpenEXR versiones anteriores a 2.4.1. Se presenta un error por un paso en el uso de la función de lectura del archivo ImfXdr.h por DwaCompressor::Classifier::Classifier, conllevando a una lectura fuera de límites. Brandon Perry discovered that OpenEXR incorrectly handled certain malformed EXR i... • http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html • CWE-125: Out-of-bounds Read CWE-193: Off-by-one Error •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-14988

https://notcve.org/view.php?id=CVE-2017-14988

02 Oct 2017 — Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid ** EN DISPUTA ** Header::readfrom en IlmImf/ImfHeader.cpp en OpenEXR 2.2.0 permite que los atacantes remotos provoquen una denegación de servicio (asignación de memoria excesiva) m... • http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00063.html • CWE-400: Uncontrolled Resource Consumption •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2

CVE-2017-12596 – Ubuntu Security Notice USN-4148-1

https://notcve.org/view.php?id=CVE-2017-12596

07 Aug 2017 — In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact. En OpenEXR 2.2.0, una imagen manipulada provoca una sobrelectura de búfer basada en memoria dinámica en la función hufDecode en IlmImf/ImfHuf.cpp durante la ejecución de exrmaketiled. Esto podría tener como consecuencia una denegación de servicio o, posiblemente, causar otro tipo de impact... • https://github.com/openexr/openexr/issues/238 • CWE-125: Out-of-bounds Read •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-9110

https://notcve.org/view.php?id=CVE-2017-9110

21 May 2017 — In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash. En OpenEXR una lectura invalida de tamaño 2 en la función hufDecode en ImfHuf.cpp podría provocar el cierre inesperado de la aplicación. • http://www.openwall.com/lists/oss-security/2017/05/12/5 •

CVSS: 8.8EPSS: 3%CPEs: 1EXPL: 0

CVE-2017-9111 – Debian Security Advisory 4755-1

https://notcve.org/view.php?id=CVE-2017-9111

21 May 2017 — In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code. En OpenEXR 2.2.0 una escritura inválida de tamaño 8 en la función storeSSE en ImfOptimizedPixelReading.h podría provocar el cierre inesperado de una aplicación o ejecutar código arbitrario. Brandon Perry discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file, a r... • http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-9112

https://notcve.org/view.php?id=CVE-2017-9112

21 May 2017 — In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash. En OpenEXR, una lectura inválida de tamaño 1 en la función getBits podría provocar el cierre inesperado de la aplicación. • http://www.openwall.com/lists/oss-security/2017/05/12/5 •

CVSS: 8.8EPSS: 3%CPEs: 1EXPL: 0

CVE-2017-9113 – Debian Security Advisory 4755-1

https://notcve.org/view.php?id=CVE-2017-9113

21 May 2017 — In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code. En OpenEXR 2.2.0 una escritura inválida de tamaño 1 en la función bufferedReadPixels en el archivo ImfInputFile.cpp podría provocar el cierre inesperado de una aplicación o ejecutar código arbitrario. It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked into opening a crafted EXR image file,... • http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2017-9114 – Debian Security Advisory 4755-1

https://notcve.org/view.php?id=CVE-2017-9114

21 May 2017 — In OpenEXR 2.2.0, an invalid read of size 1 in the refill function in ImfFastHuf.cpp could cause the application to crash. En la versión 2.2.0 de OpenEXR, una lectura inválida de tamaño 1 en la función refill en ImfFastHuf.cpp podría provocar el cierre inesperado de la aplicación. Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files. • http://www.openwall.com/lists/oss-security/2017/05/12/5 •

CVSS: 8.8EPSS: 2%CPEs: 1EXPL: 0

CVE-2017-9115 – Debian Security Advisory 4755-1

https://notcve.org/view.php?id=CVE-2017-9115

21 May 2017 — In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code. En la versión 2.2.0 de OpenEXR, una lectura inválida de tamaño 2 en la función = operator podría provocar el cierre inesperado de la aplicación o la ejecución de código arbitrario. Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR i... • http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00060.html •