VYPR
Medium severity5.5NVD Advisory· Published Apr 14, 2020· Updated Jun 17, 2026

CVE-2020-11761

CVE-2020-11761

Description

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during Huffman uncompression, as demonstrated by FastHufDecoder::refill in ImfFastHuf.cpp.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

42
  • cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*
    Range: <7.20
  • cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*
    Range: <12.10.8
  • cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*
    Range: <2.4.1
  • cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*
    Range: <13.6
  • cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
    Range: <13.6
  • Apple Inc./Mac OS X24 versions
    cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*+ 23 more
    • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*range: <10.15.6
    • cpe:2.3:o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2020-003:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*
    • cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*
  • cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
    Range: <13.4.8
  • cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
    Range: <6.2.8
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*+ 3 more
    • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
    • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
  • OpenEXR/OpenEXRdescription
  • Range: <2.4.1
  • osv-coords2 versions
    < 2.2.1-lp151.4.9.1+ 1 more
    • (no CPE)range: < 2.2.1-lp151.4.9.1
    • (no CPE)range: < 2.2.1-3.14.1

Patches

Vulnerability mechanics

References

16

News mentions

0

No linked articles in our index yet.