CVE-2021-3933

2022-03-2500:00:00

CWE-190

redhat

www.cve.org

cve-2021-3933

openexr

integer overflow

file processing

application stability

attack paths

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

33.2%

JSON

An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "openexr",
    "versions": [
      {
        "version": "OpenEXR 3.1.2",
        "status": "affected"
      }
    ]
  }
]