CVE-2021-45942

Description

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• cve@mitre.org — Exploit, Issue Tracking, Mailing List, Patch, Third Party Advisory
• cve@mitre.org — Release Notes, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Exploit, Patch, Third Party Advisory
• cve@mitre.org — Release Notes, Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Third Party Advisory