An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2020-11764 openexr Fixed in: 2.5.3-2

References

• advisory lists.opensuse.org
• advisory github.com
• advisory github.com
• advisory lists.debian.org
• advisory security.gentoo.org
• advisory support.apple.com
• advisory support.apple.com
• advisory support.apple.com
• advisory support.apple.com
• advisory support.apple.com
• advisory support.apple.com
• advisory support.apple.com
• advisory usn.ubuntu.com
• advisory debian.org
• report bugs.chromium.org
• web lists.fedoraproject.org