Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Tinyexr Project records in CISA KEVNo Tinyexr Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 46
tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01817 · Published 2018-06-16 · No fix listed CWE-125
Priority MEDIUM 45
tinyexr 0.9.5 has a segmentation fault in the wav2Decode function.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01605 · Published 2018-06-22 · No fix listed CWE-20
Priority MEDIUM 45
tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01605 · Published 2018-06-11 · No fix listed CWE-125
Priority MEDIUM 45
tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01256 · Published 2018-06-08 · No fix listed CWE-125
Priority MEDIUM 41
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01507 · Published 2022-06-22 · No fix listed CWE-125
Priority LOW 36
tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01377 · Published 2018-06-22 · No fix listed CWE-617
Priority LOW 36
tinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01559 · Published 2018-06-16 · No fix listed CWE-617
Priority LOW 36
tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01377 · Published 2018-06-11 · No fix listed CWE-772
Priority LOW 35
tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01233 · Published 2021-07-26 · No fix listed CWE-129
Priority LOW 35
tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01233 · Published 2021-07-26 · No fix listed CWE-129
Priority LOW 34
tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0033 · Published 2022-09-06 · No fix listed CWE-787
Priority LOW 32
An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01456 · Published 2019-01-01 · No fix listed CWE-770
Priority LOW 26
tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.0083 · Published 2021-07-21 · No fix listed CWE-190
Open these records in search →