Lucene search

K
osvGoogleOSV:CVE-2021-20296
HistoryApr 01, 2021 - 2:15 p.m.

CVE-2021-20296

2021-04-0114:15:13
Google
osv.dev
9
openexr
flaw
crafted input
null pointer dereference
system availability

AI Score

6.3

Confidence

Low

EPSS

0.001

Percentile

48.6%

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR’s IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availability.