VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 4, 2022· Updated Aug 3, 2024

CVE-2021-20303

CVE-2021-20303

Description

A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, leading to an out-of-bounds write on the heap. The greatest impact of this flaw is to application availability, with some potential impact to data integrity as well.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

36

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.