Remote No

Type Arbitrary code execution

Description

A buffer overflow security issue has been found in OpenEXR before version 3.0.1.

AVG-1862 openexr 2.5.5-1 Medium Vulnerable FS#70555

https://github.com/AcademySoftwareFoundation/openexr/pull/872
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28051
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28155
https://github.com/AcademySoftwareFoundation/openexr/commit/ae6d203892cc9311917a7f4f05354ef792b3e58e