Lucene search

K
osvGoogleOSV:CVE-2021-3476
HistoryMar 30, 2021 - 6:15 p.m.

CVE-2021-3476

2021-03-3018:15:18
Google
osv.dev
8
openexr
b44 uncompression
shift overflows
application availability
vulnerability
cve-2021-3476

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

52.7%

A flaw was found in OpenEXR’s B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability.