CVE-2021-20296CWE-476

A flaw was found in OpenEXR in versions before 3.0.0-beta

published April 1, 2021

CVSS
—
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01747 · 77.6th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-04-01T00:00Z
EPSS history
Timeline
  • 01 APR 00:00Z
    A flaw was found in OpenEXR in versions before 3.0.0-beta
    cvelistv5