5.5
CVSSv3

CVE-2020-11761

Published: 14/04/2020 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

An issue exists in OpenEXR prior to 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

openexr openexr

fedoraproject fedora 32

canonical ubuntu linux 18.04

canonical ubuntu linux 19.10

canonical ubuntu linux 20.04

canonical ubuntu linux 16.04

debian debian linux 9.0

debian debian linux 10.0

apple mac os x

apple tvos

apple iphone os

apple icloud

apple itunes

apple watchos

apple ipados

apple mac os x 10.14.6

apple mac os x 10.13.6

Vendor Advisories

Synopsis Moderate: OpenEXR security update Type/Severity Security Advisory: Moderate Topic An update for OpenEXR is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, wh ...
Debian Bug report logs - #959444 openexr: CVE-2020-11758 CVE-2020-11759 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 Package: openexr; Maintainer for openexr is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Source for openexr is src:openexr (PTS, buildd, po ...
Several security issues were fixed in OpenEXR ...
Multiple security issues were found in the OpenEXR image library, which could result in denial of service and potentially the execution of arbitrary code when processing malformed EXR image files For the stable distribution (buster), these problems have been fixed in version 221-41+deb10u1 We recommend that you upgrade your openexr packages F ...
An issue was discovered in OpenEXR before 241 There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHufcpp (CVE-2020-11761) An issue was discovered in OpenEXR before 241 There is an std::vector out-of-bounds read and write, as demonstrated by ImfTileOffsetscpp (CVE-2020-11763) An ...