CVE-2021-20300

2022-03-0400:00:00

CWE-190

redhat

www.cve.org

openexr

hufuncompress

integer overflow

vulnerability

system availability

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

39.7%

JSON

A flaw was found in OpenEXR’s hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file that is processed by OpenEXR, to trigger an integer overflow. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "OpenEXR",
    "versions": [
      {
        "version": "Fixed in v2.5.4 and beyond.",
        "status": "affected"
      }
    ]
  }
]