CVE-2021-20302

2022-03-0400:00:00

CWE-20

redhat

www.cve.org

openexr

tiledinputfile

non-image

vulnerability

floating-point exception

system availability

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

35.7%

JSON

A flaw was found in OpenEXR’s TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processed by OpenEXR, to trigger a floating-point exception error. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "OpenEXR",
    "versions": [
      {
        "version": "Fixed in v2.5.4 and beyond.",
        "status": "affected"
      }
    ]
  }
]