An issue was discovered in OpenEXR before 2.4.1. There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsets.cpp.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openexr | Aug 22, 2024 | Apr 14, 2020 |
| Amazon Linux Ami 2 | — | Upgrade OpenEXR-debuginfoUpgrade OpenEXRUpgrade OpenEXR-libsUpgrade OpenEXR-devel | Oct 28, 2020 | Apr 14, 2020 |
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Sep 9, 2020 | Sep 8, 2020 |
| Apple Osx Imageio | — | Apply Apple macOS Security Update 2020-004 High SierraApply Apple macOS Security Update 2020-004 Mojave | Sep 9, 2020 | Sep 8, 2020 |
| Centos_linux | — | Upgrade OpenEXRUpgrade OpenEXR-libsUpgrade OpenEXR-develUpgrade OpenEXR-debuginfo | Oct 1, 2020 | Apr 14, 2020 |
| Debian | — | Upgrade openexr | Aug 31, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade media-libs/openexr. | Jul 12, 2021 | Apr 14, 2020 |
| Huawei Euleros 2_0_sp2 | — | — | Feb 22, 2021 | Apr 14, 2020 |
| Huawei Euleros 2_0_sp3 | — | — | Apr 30, 2021 | Apr 14, 2020 |
| Huawei Euleros 2_0_sp5 | — | — | Nov 2, 2020 | Apr 14, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Oct 11, 2022 | Apr 14, 2020 |
| Oracle_linux | — | Upgrade openexr-develUpgrade openexr-libsUpgrade openexr | Oct 7, 2020 | Feb 8, 2020 |
| Redhat_linux | — | Upgrade openexrNo solution existsUpgrade openexr-libsUpgrade openexr-develUpgrade openexr-debuginfo | Oct 1, 2020 | Apr 14, 2020 |
| Suse | — | Upgrade libIlmImf-2_2-23Upgrade libilmimfutil-2_2-23-32bitUpgrade openexrUpgrade libIlmImf-Imf_2_1-21Upgrade OpenEXR-develUpgrade libIlmImfUtil-2_2-23Upgrade libilmimf-2_2-23-32bitUpgrade libIlmImf-Imf_2_1-21-32bitUpgrade openexr-doc | May 19, 2020 | Apr 14, 2020 |
| Ubuntu | — | Upgrade libopenexr23Upgrade libopenexr24Upgrade libopenexr22Upgrade openexr | Apr 28, 2020 | Apr 14, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub