CVE-2021-20296 log
| Source |
|
| Severity | Low |
| Remote | No |
| Type | Denial of service |
| Description | A flaw was found in OpenEXR in versions before 2.5.4. A crafted input file supplied by an attacker that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library could cause a NULL pointer dereference. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1746 | openexr | 2.5.3-6 | 2.5.4-1 | Low | Fixed |