CVE-2017-9113

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.2.0

Description The issue is related to insufficient input validation in the bufferedReadPixels function, which could lead to an invalid write of size 1, causing the application to crash or potentially execute arbitrary code. This could allow a remote attacker to cause a denial of service.

Recommendations For OpenEXR version 2.2.0, consider applying input validation to the bufferedReadPixels function to prevent invalid writes. As a temporary workaround, restrict the use of the bufferedReadPixels function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.