CVE-2020-15304

An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file could cause invalid memory access in TiledInputFile::TiledInputFile() in IlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference.

References

Affected packages

Git / github.com/academysoftwarefoundation/openexr

Affected ranges

Type: GIT
Repo: https://github.com/academysoftwarefoundation/openexr
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

24a1bf50bc59a93e80b0fba8fb2450967baa4de7

Type

GIT

Repo

https://github.com/openexr/openexr

Events

Introduced

Fixed

24a1bf50bc59a93e80b0fba8fb2450967baa4de7

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.5.2"
        }
    ]
}

Affected versions

Other

OPENEXR_1_0_4

v1.*

v1.7.1

v2.*

v2.0.0

v2.0.0.GM

v2.0.0.beta.1

v2.0.0.beta.2

v2.0.1

v2.1.0

v2.2.0

v2.3.0

v2.4.0

v2.4.0-beta.1

v2.5.0

v2.5.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15304.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "31"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "32"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.2"
            }
        ]
    }
]