A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.
References
Configurations
History
21 Nov 2024, 05:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/security/cve/CVE-2021-20304 - Third Party Advisory | |
| References | () https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26229 - Exploit, Mailing List, Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1939157 - Issue Tracking, Third Party Advisory | |
| References | () https://github.com/AcademySoftwareFoundation/openexr/commit/51a92d67f53c08230734e74564c807043cbfe41e - Patch, Third Party Advisory | |
| References | () https://github.com/AcademySoftwareFoundation/openexr/pull/849 - Patch, Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/202210-31 - Third Party Advisory |
Information
Published : 2022-08-23 16:15
Updated : 2024-11-21 05:46
NVD link : CVE-2021-20304
Mitre link : CVE-2021-20304
CVE.ORG link : CVE-2021-20304
JSON object : View
Products Affected
openexr
- openexr
CWE
CWE-190
Integer Overflow or Wraparound