CVE-2023-5841
OpenEXR Heap Overflow in Scanline Deep Data Parsing
Summary
OpenEXR Heap Overflow in Scanline Deep Data Parsing
Original description
The description as published by the source.
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-5841 openexr
- Ubuntu UBUNTU-CVE-2023-5841 openexr
References
- advisory github.com
- advisory nvd.nist.gov
- web seclists.org
- web seclists.org
- web seclists.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web takeonme.org