OSV-2021-1627

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2021-1627.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2021-1627
Published
2021-11-27T00:00:35.244395Z
Modified
2022-04-13T03:21:28.115569Z
Summary
Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41416

Crash type: Heap-buffer-overflow WRITE 2
Crash state:
Imf_3_1::LineCompositeTask::execute
IlmThread_3_1::NullThreadPoolProvider::addTask
IlmThread_3_1::ThreadPool::addGlobalTask
References

Affected packages

OSS-Fuzz / openexr

Package

Name
openexr
Purl
pkg:generic/openexr

Affected ranges

Type
GIT
Repo
https://github.com/AcademySoftwareFoundation/openexr
Events
Introduced
8f45d8fa44bc2420a365b2818d97ed91fb0dc689
Fixed
db217f29dfb24f6b4b5100c24ac5e7490e1c57d0
Fixed
2a9380544b13e401eb7687c4085a9bb24188b1b3

Affected versions

v3.*

v3.1.0
v3.1.0-rc1
v3.1.1
v3.1.1-rc
v3.1.2
v3.1.2-rc
v3.1.2-rc2
v3.1.3
v3.1.3-rc

Ecosystem specific 

{
    "severity": "HIGH"
}