High severity8.8NVD Advisory· Published Jun 23, 2022· Updated Jun 17, 2026
CVE-2022-34300
CVE-2022-34300
Description
In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:tinyexr_project:tinyexr:1.0.1:*:*:*:*:*:*:*
- tinyexr/tinyexrdescription
Patches
Vulnerability mechanics
References
5- github.com/syoyo/tinyexr/issues/167nvdExploitIssue TrackingThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSGENQ3UEQ6QEKW45FLZFGXPCD5IHXFM/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I4YMGAN6AV4H4HPDINUHBKX7XE4T5THF/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFCXR2EJGIE24DV45AWX6JJM7RQAT5CY/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LQCZL36LTOHWCQ25R5WTRSD5QMM436Q6/nvd
News mentions
0No linked articles in our index yet.