Vulnerability	Vulnerable Version
H Heap-based Buffer Overflow OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Heap-based Buffer Overflow via `undo_zip_impl` function during a write operation when decompressing ZIPS-packed deep scan-line EXR files. An attacker can write arbitrary data to the heap and potentially execute code by supplying a specially crafted EXR file with a forged chunk header. How to fix Heap-based Buffer Overflow? Upgrade `OpenEXR` to version 3.3.3 or higher.	[3.3.0,3.3.3)

Heap-based Buffer Overflow

OpenEXR is a Python bindings for the OpenEXR image file format

Affected versions of this package are vulnerable to Heap-based Buffer Overflow via undo_zip_impl function during a write operation when decompressing ZIPS-packed deep scan-line EXR files. An attacker can write arbitrary data to the heap and potentially execute code by supplying a specially crafted EXR file with a forged chunk header.

How to fix Heap-based Buffer Overflow?

Upgrade OpenEXR to version 3.3.3 or higher.

[3.3.0,3.3.3)

Go back to all versions of this package