Published: 25/03/2022 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openexr openexr
fedoraproject fedora 36
debian debian linux 10.0
debian debian linux 11.0

Debian Bug report logs - #1014828 openexr: CVE-2021-3933 CVE-2021-3941 CVE-2021-45942 Package: src:openexr; Maintainer for src:openexr is Debian PhotoTools Maintainers <pkg-phototools-devel@listsaliothdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Tue, 12 Jul 2022 19:33:02 UTC Severity: grave T ...

Multiple security vulnerabilities have been found in OpenEXR, command-line tools and a library for the OpenEXR image format Buffer overflows or out-of-bound reads could lead to a denial of service (application crash) if a malformed image file is processed For the stable distribution (bullseye), these problems have been fixed in version 254-2+de ...

An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t is less than 64 bits This issue could cause an invalid bytesPerLine and maxBytesPerLine value, which leads to problems with application stability or other attack paths (CVE-2021-3933) In ImfChromaticitiescpp routine RGBtoXYZ(), there are some division o ...

ALAS-2022-216 Amazon Linux 2022 Security Advisory: ALAS-2022-216 Advisory Release Date: 2022-12-06 16:41 Pacific ...

CWE-190 https://bugzilla.redhat.com/show_bug.cgi?id=2019783 https://security.gentoo.org/glsa/202210-31 https://www.debian.org/security/2022/dsa-5299 https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I2JSMJ7HLWFPYYV7IAQZD5ZUUUN7RWBN/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014828 https://nvd.nist.gov https://www.debian.org/security/2022/dsa-5299

CVE-2021-3933

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect