Out-of-bounds Write

Affecting openexr package, versions *

Overview

Affected versions of this package are vulnerable to Out-of-bounds Write. A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR file.

Remediation

There is no fixed version for openexr.

References

• ADVISORY
• MISC
• MISC