« List of all CVEs

CVE-2021-3478

Published: 3/31/2021 Last updated: 8/3/2024 Reserved: 3/30/2021

There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory. The greatest impact of this flaw is to system availability.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (1)

conf-openimageio

Products affected (1)

Product Vendor Version
OpenEXR n/a < 10.0.22631.3447

References (10)