CVE-2017-9113 in OpenEXRinfo

Summary

In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

05/21/2017

Disclosure

05/21/2017

Entries

1

CPE

ready

CVSS

7.5

EPSS

0.02601

CTI

0.00

Sources