VULNERABILITY INTELLIGENCE

CVE-2021-23169

CVSS score8.8 HIGH

EPSS probability2.29%

CISA KEVNot currently listed

Published2021-06-08

Last modified2026-06-17

Description

A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.