Vulnerabilities > Openexr > Openexr > 3.0.5

DATE CVE VULNERABILITY TITLE RISK
2024-02-01 CVE-2023-5841 Out-of-bounds Write vulnerability in Openexr
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability.
network
low complexity
openexr CWE-787
critical
9.1
2022-03-25 CVE-2021-3933 Integer Overflow or Wraparound vulnerability in multiple products
An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits.
local
low complexity
openexr fedoraproject debian CWE-190
5.5