CVE-2021-3605

Related Vulnerabilities: CVE-2021-3605  

There's a flaw in OpenEXR's rleUncompress functionality. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

Description

There's a flaw in OpenEXR's rleUncompress functionality. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.

Additional Information

  • Bugzilla 1970991: CVE-2021-3605 OpenEXR: Heap buffer overflow in the rleUncompress function
  • CWE-119->CWE-125: Improper Restriction of Operations within the Bounds of a Memory Buffer leads to Out-of-bounds Read
  • FAQ: Frequently asked questions about CVE-2021-3605