CVE-2021-3478CWE-400

CVE-2021-3478: vulnerability in OpenEXR

Published · Updated

Follow this CVE+ Monitor OpenEXR+ Monitor openexr

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory. The greatest impact of this flaw is to system availability.
Affected products
n/a · OpenEXR