CVE-2020-11765

An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Class...

Original description

The description as published by the source.

An issue was discovered in OpenEXR before 2.4.1. There is an off-by-one error in use of the ImfXdr.h read function by DwaCompressor::Classifier::Classifier, leading to an out-of-bounds read.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2020-11765 openexr Fixed in: 2.5.3-2

References

advisory lists.opensuse.org
advisory github.com
advisory github.com
advisory lists.debian.org
advisory security.gentoo.org
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory support.apple.com
advisory usn.ubuntu.com
advisory debian.org
report bugs.chromium.org
web lists.fedoraproject.org