CVE-2021-3598

Related Vulnerabilities: CVE-2021-3598  

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

Description

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

Additional Information

  • Bugzilla 1970987: CVE-2021-3598 OpenEXR: Heap buffer overflow in Imf_3_1::CharPtrIO::readChars
  • CWE-119->CWE-125: Improper Restriction of Operations within the Bounds of a Memory Buffer leads to Out-of-bounds Read
  • FAQ: Frequently asked questions about CVE-2021-3598