Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-16587
5.5
MEDIUMCVSS v3
Published
December 9, 2020
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file.
AcademySoftwareFoundation/openexr
GitHubThe OpenEXR project provides the specification and reference implementation of the EXR file format, the professional-grade image storage format of the motion picture industry.
GitHubThe OpenEXR project provides the specification and reference implementation of the EXR file format, the professional-grade image storage format of the motion picture industry.= 2.3.0NVD