CVE-2020-11764medium
Description
An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds write in copyIntoFrameBuffer in ImfMisc.cpp.
References
https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1
https://bugs.chromium.org/p/project-zero/issues/detail?id=1987
https://usn.ubuntu.com/4339-1/
http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html
https://www.debian.org/security/2020/dsa-4755
https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html
https://support.apple.com/kb/HT211293
https://support.apple.com/kb/HT211290
https://support.apple.com/kb/HT211291
https://support.apple.com/kb/HT211288
https://support.apple.com/kb/HT211289
https://support.apple.com/kb/HT211294
Details
Source: MITRE
Published: 2020-04-14
Updated: 2022-11-14
Type: CWE-787
Risk Information
CVSS v2
Base Score: 4.3
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Impact Score: 2.9
Exploitability Score: 8.6
Severity: MEDIUM
CVSS v3
Base Score: 5.5
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Impact Score: 3.6
Exploitability Score: 1.8
Severity: MEDIUM