In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade openexr-libsUpgrade openexr-debugsourceUpgrade openexr-libs-debuginfoUpgrade openexr-debuginfoUpgrade openexr-develUpgrade openexr | Feb 17, 2025 | Sep 21, 2021 |
| Debian | — | Upgrade openexr | Dec 12, 2022 | Mar 25, 2022 |
| Gentoo Linux | — | Upgrade media-libs/openexr. | Oct 31, 2022 | Mar 25, 2022 |
| Huawei Euleros 2_0_sp3 | — | — | Feb 24, 2022 | Feb 23, 2022 |
| Huawei Euleros 2_0_sp5 | — | — | Mar 2, 2022 | Feb 23, 2022 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 25, 2022 |
| Suse | — | Upgrade OpenEXR-develUpgrade openexr-docUpgrade libIlmImf-Imf_2_1-21Upgrade libilmimf-2_2-23-32bitUpgrade libIlmImf-2_2-23Upgrade libilmimfutil-2_2-23-32bitUpgrade openexrUpgrade libIlmImf-Imf_2_1-21-32bitUpgrade OpenEXR-32bitUpgrade libIlmImfUtil-2_2-23 | Dec 2, 2021 | Nov 17, 2021 |
| Ubuntu | — | Upgrade libopenexr22 (Ubuntu Pro)Upgrade libopenexr22Upgrade openexrUpgrade libopenexr24 (Ubuntu Pro)Upgrade libopenexr25 (Ubuntu Pro)Upgrade openexr (Ubuntu Pro) | Nov 18, 2021 | Nov 17, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub