tinyexr commit 0.9.5 exists to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS).
tinyexr project tinyexr 0.9.5