CVE-2021-20303CWE-190

A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp

published March 4, 2022

CVSS
—
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to application availability, with some potential impact to data integrity as well.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00822 · 56.9th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2022-03-04T00:00Z
EPSS history
Timeline
  • 04 MAR 00:00Z
    A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp
    cvelistv5