CVE-2020-11759

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCoun...

Original description

The description as published by the source.

An issue was discovered in OpenEXR before 2.4.1. Because of integer overflows in CompositeDeepScanLine::Data::handleDeepFrameBuffer and readSampleCountForLineBlock, an attacker can write to an out-of-bounds pointer.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-11759 openexr Fixed in: 2.5.3-2

References

advisory github.com
advisory github.com
advisory lists.debian.org
advisory security.gentoo.org
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory usn.ubuntu.com
advisory debian.org
report bugs.chromium.org
web lists.fedoraproject.org