CVE-2018-12064: Critical severity Tinyexr Project Tinyexr vulnerability
Published Jun 8, 2018
·Updated
tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h.
Affected Software
1 affected component
Tinyexr Project Tinyexr=0.9.5
Event History
Jun 8, 2018
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-12064?
CVE-2018-12064 is a vulnerability in tinyexr 0.9.5 that allows for a heap-based buffer over-read.
2
How severe is CVE-2018-12064?
CVE-2018-12064 is considered to be critical with a severity score of 9.8.
3
How does CVE-2018-12064 affect tinyexr?
CVE-2018-12064 affects the version 0.9.5 of tinyexr.
4
What is the Common Weakness Enumeration (CWE) for CVE-2018-12064?
The Common Weakness Enumeration (CWE) for CVE-2018-12064 is CWE-125.
5
Is there a fix available for CVE-2018-12064?
It is recommended to update to a version of tinyexr that is not affected by the vulnerability. Please refer to the vendor for a fix.