CVE-2021-3933CWE-190

CVE-2021-3933: vulnerability in openexr

Published · Updated

Follow this CVE+ Monitor OpenEXR+ Monitor openexr

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths.
Affected products
n/a · openexr