CVE-2017-9110: Medium severity OpenEXR OpenEXR vulnerability
Published May 21, 2017
·Updated
In OpenEXR 2.2.0, an invalid read of size 2 in the hufDecode function in ImfHuf.cpp could cause the application to crash.
Affected Software
2 affected componentsFixes available
OpenEXR OpenEXR=2.2.0
debian/openexr
2.5.4-2+deb11u13.1.5-53.1.13-23.4.6+ds-4
Remediation
Event History
May 21, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:41 PM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·08:34 PM
RemedyDescriptionSeverityAffected Software
Mar 19, 2026
Data Sourced
via Debian·08:56 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2017-9110?
CVE-2017-9110 is a vulnerability in OpenEXR 2.2.0 that can cause an application to crash due to an invalid read of size 2 in the hufDecode function in ImfHuf.cpp.
2
How severe is CVE-2017-9110?
CVE-2017-9110 has a severity rating of medium with a score of 6.5.
3
How can CVE-2017-9110 be exploited?
CVE-2017-9110 can be exploited by causing the application to process a specially crafted image file that triggers the invalid read in the hufDecode function.
4
Is OpenEXR 2.2.0 the only affected version?
Yes, OpenEXR 2.2.0 is the only affected version of the software.
5
Is there a fix available for CVE-2017-9110?
Yes, a fix for CVE-2017-9110 is available in the form of a patch that can be applied to OpenEXR 2.2.0.