PT-2018-11222

CVE-2018-12503

Published

2018-06-16

Updated

2019-10-03

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions tinyexr version 0.9.5

Description The issue is related to a heap-based buffer over-read in the LoadEXRImageFromMemory function located in tinyexr.h.

Recommendations For tinyexr version 0.9.5, update to a newer version that contains a fix for this issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾