Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2021-08109 CVE-2021-26260 · GHSA-mr39-xfw3-r82c

Uncontrolled resource consumption in OpenEXR

Priority LOW 27

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01054 Published 2021-06-08 Fix deferred CWE-400
TI-2021-05977 CVE-2021-23215 · GHSA-4463-879q-57jx

Uncontrolled resource consumption in OpenEXR

Priority LOW 27

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01103 Published 2021-06-08 Fix deferred CWE-400
TI-2021-05947 CVE-2021-23169 · GHSA-f3pg-chcp-5ff8

Out-of-bounds write in OpenEXR

Priority MEDIUM 42

A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02291 Published 2021-06-08 Will not fix CWE-787