CVE-2020-16589

Name of the Vulnerable Software and Affected Versions OpenEXR version 2.3.0

Description A head-based buffer overflow exists in the writeTileData function of OpenEXR that can cause a denial of service via a crafted EXR file. This issue is related to writing beyond the boundaries of a buffer. Exploitation of this issue may allow a remote attacker to cause a denial of service.

Recommendations For OpenEXR version 2.3.0, consider disabling the writeTileData function in ImfTiledOutputFile.cpp to prevent exploitation until a patch is available. Avoid using crafted EXR files that could trigger the buffer overflow. At the moment, there is no information about a newer version that contains a fix for this issue.