CVE-2021-23169CWE-787

CVE-2021-23169: vulnerability in OpenEXR

Published · Updated

Follow this CVE+ Monitor OpenEXR+ Monitor openexr

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.3%
A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.
Affected products
n/a · OpenEXR