CVE-2017-9113: High severity OpenEXR OpenEXR vulnerability
Published May 21, 2017
·Updated
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
Affected Software
2 affected componentsFixes available
OpenEXR OpenEXR=2.2.0
debian/openexr
2.5.4-2+deb11u13.1.5-53.1.13-23.4.6+ds-4
Remediation
Event History
May 21, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:41 PM
Description
Feb 19, 2026
Data Sourced
via Ubuntu·08:34 PM
RemedyDescriptionSeverityAffected Software
Mar 19, 2026
Data Sourced
via Debian·08:56 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this OpenEXR vulnerability?
The vulnerability ID for this OpenEXR vulnerability is CVE-2017-9113.
2
What is the severity of CVE-2017-9113?
CVE-2017-9113 has a severity rating of 8.8, which is considered high.
3
How does CVE-2017-9113 affect OpenEXR?
CVE-2017-9113 in OpenEXR 2.2.0 could cause the application to crash or execute arbitrary code.
4
Which versions of OpenEXR are affected by CVE-2017-9113?
OpenEXR versions 2.2.0-11.1ubuntu1.1, 2.2.1-4.1ubuntu0.1, 2.2.1-4.1ubuntu0.1, 2.3.0-6ubuntu0.1, 2.2.0-10ubuntu2.1, and various Debian versions are affected by CVE-2017-9113.
5
How can I fix the CVE-2017-9113 vulnerability in OpenEXR?
To fix the CVE-2017-9113 vulnerability in OpenEXR, it is recommended to update to the appropriate patched version.