PT-2019-6170
CVE-2020-18430
·
Published
2019-03-05
·
Updated
2021-08-03
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
tinyexr version 0.9.5
Description
The issue is related to an array index error in the
tinyexr::DecodeEXRImage component of the tinyexr library for image processing. This error can be exploited by a remote attacker to cause a denial of service.Recommendations
For tinyexr version 0.9.5, consider disabling the
tinyexr::DecodeEXRImage component until a patch is available to prevent potential denial of service attacks.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾