CVE-2021-3476CWE-190

CVE-2021-3476: vulnerability in OpenEXR

Published · Updated

Follow this CVE+ Monitor OpenEXR+ Monitor openexr

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.8%
A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability.
Affected products
n/a · OpenEXR