Vulnerabilities > Openexr
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-03-30 | CVE-2021-3476 | A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. | 5.3 |
| 2021-03-30 | CVE-2021-3475 | There is a flaw in OpenEXR in versions before 3.0.0-beta. | 5.3 |
| 2021-03-30 | CVE-2021-3474 | There's a flaw in OpenEXR in versions before 3.0.0-beta. | 5.3 |
| 2020-12-09 | CVE-2020-16589 | Out-of-bounds Write vulnerability in multiple products A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR file. | 5.5 |
| 2020-12-09 | CVE-2020-16588 | NULL Pointer Dereference vulnerability in multiple products A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file. | 5.5 |
| 2020-12-09 | CVE-2020-16587 | Out-of-bounds Write vulnerability in multiple products A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file. | 5.5 |
| 2020-06-26 | CVE-2020-15306 | Out-of-bounds Write vulnerability in multiple products An issue was discovered in OpenEXR before v2.5.2. | 5.5 |
| 2020-06-26 | CVE-2020-15305 | Use After Free vulnerability in multiple products An issue was discovered in OpenEXR before 2.5.2. | 5.5 |
| 2020-06-26 | CVE-2020-15304 | NULL Pointer Dereference vulnerability in multiple products An issue was discovered in OpenEXR before 2.5.2. | 5.5 |
| 2020-04-14 | CVE-2020-11765 | Off-by-one Error vulnerability in multiple products An issue was discovered in OpenEXR before 2.4.1. | 5.5 |