« List of all CVEs

CVE-2021-3933

Published: 3/25/2022 Last updated: 8/3/2024 Reserved: 11/8/2021

An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (1)

conf-openimageio

Products affected (1)

Product Vendor Version
openexr n/a 22.0 ap358854

References (10)