CVE-2017-12596

In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled execution; it may result in denial of service or possibly unspecified other impact.

References

Affected packages

Git

github.com/AcademySoftwareFoundation/openexr

Affected ranges

Type

GIT

Repo

https://github.com/AcademySoftwareFoundation/openexr

Events

Introduced

e98d25b30138634be20d925d7fe6d109311b2a06

Last Affected

e98d25b30138634be20d925d7fe6d109311b2a06

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.2.0"
        },
        {
            "last_affected":  "2.2.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

2.*

2.2.0

v2.*

v2.2.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12596.json"

github.com/academysoftwarefoundation/openexr

Affected ranges

Type

GIT

Repo

https://github.com/academysoftwarefoundation/openexr

Events

Introduced

e98d25b30138634be20d925d7fe6d109311b2a06

Last Affected

e98d25b30138634be20d925d7fe6d109311b2a06

Fixed

0ac2ea34c8f3134148a5df4052e40f155b76f6fb

Database specific

Show details

{
    "cpe":  "cpe:2.3:a:openexr:openexr:2.2.0:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "2.2.0"
        },
        {
            "last_affected":  "2.2.0"
        }
    ],
    "source":  [
        "CPE_STRING",
        "REFERENCES"
    ]
}

Affected versions

2.*

2.2.0

v2.*

v2.2.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-12596.json"