PT-2026-35467
Published
2026-04-17
·
Updated
2026-04-17
Description by
CVSS 3.1
6.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as
float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y; and chroma.green.y * (X + Z))) / d; but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.Exploitability
Fix
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾