| Package | Affected versions | Patched versions |
|---|---|---|
| openexr | < 3.0.5 | 3.0.5 |
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application linked with OpenEXR could cause an out-of-bounds read. The greatest risk from this flaw is to application availability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free