CVE-2021-20303

A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An
attacker who is able to submit a crafted file to be processed by OpenEXR
could trigger an integer overflow, leading to an out-of-bounds write on the
heap. The greatest impact of this flaw is to application availability, with
some potential impact to data integrity as well.

Bugs

• <https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25505&gt;