CVE-2021-20299

2022-03-1600:00:00

CWE-476

redhat

www.cve.org

openexr

multipart

null pointer

vulnerability

system availability

EPSS

0.001

Percentile

45.1%

JSON

A flaw was found in OpenEXR’s Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "OpenEXR",
    "versions": [
      {
        "version": "Affected before v2.5.4",
        "status": "affected"
      }
    ]
  }
]