CVE-2021-26260

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this f...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2021-26260 openexr Corrigé dans: 2.5.7-1

Références

advisory lists.debian.org
advisory lists.debian.org
advisory debian.org
patch bugzilla.redhat.com
web lists.fedoraproject.org