CVE - CVE-2021-20304

CVE-ID
CVE-2021-20304	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
GENTOO:GLSA-202210-31 URL:https://security.gentoo.org/glsa/202210-31 MISC:https://access.redhat.com/security/cve/CVE-2021-20304 URL:https://access.redhat.com/security/cve/CVE-2021-20304 MISC:https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26229 URL:https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26229 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1939157 URL:https://bugzilla.redhat.com/show_bug.cgi?id=1939157 MISC:https://github.com/AcademySoftwareFoundation/openexr/commit/51a92d67f53c08230734e74564c807043cbfe41e URL:https://github.com/AcademySoftwareFoundation/openexr/commit/51a92d67f53c08230734e74564c807043cbfe41e MISC:https://github.com/AcademySoftwareFoundation/openexr/pull/849 URL:https://github.com/AcademySoftwareFoundation/openexr/pull/849
Assigning CNA
Red Hat, Inc.
Date Record Created
20201217	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20201217)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)