| Package | Affected versions | Patched versions |
|---|---|---|
| openexr | ≥ 2.5.0, < 2.5.4< 2.4.3 | 2.5.42.4.3 |
There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free