CVE-2018-12503: Critical severity Tinyexr Project Tinyexr vulnerability
Published Jun 16, 2018
·Updated
tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h.
Affected Software
1 affected component
Tinyexr Project Tinyexr=0.9.5
Event History
Jun 16, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-12503?
CVE-2018-12503 is a vulnerability in tinyexr version 0.9.5 that allows heap-based buffer over-read in the LoadEXRImageFromMemory function in tinyexr.h.
2
How severe is CVE-2018-12503?
CVE-2018-12503 is classified as critical with a severity score of 9.8.
3
What is the affected software?
The affected software is tinyexr version 0.9.5.
4
How can I fix CVE-2018-12503?
To fix CVE-2018-12503, you should update tinyexr to a version that is not affected by the vulnerability.
5
Where can I find more information about CVE-2018-12503?
You can find more information about CVE-2018-12503 in the following references: [link1], [link2].