Lucene search

K
osvGoogleOSV:CVE-2021-3941
HistoryMar 25, 2022 - 7:15 p.m.

CVE-2021-3941

2022-03-2519:15:09
Google
osv.dev
11
openexr
imfchromaticities.cpp
division operations
cve-2021-3941
availability

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

14.2%

In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y; and chroma.green.y * (X + Z))) / d; but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.