CVE-2020-16588

Name of the Vulnerable Software and Affected Versions Academy Software Foundation OpenEXR version 2.3.0

Description A Null Pointer Deference issue exists in the generatePreview function in makePreview.cpp that can cause a denial of service via a crafted EXR file. This issue is related to errors in pointer dereference, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For version 2.3.0, consider disabling the generatePreview function in makePreview.cpp as a temporary workaround until a patch is available. Restrict access to crafted EXR files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.