CVE-2018-12504: High severity Tinyexr Project Tinyexr vulnerability

Published Jun 16, 2018

Updated

tinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h.

Affected Software

1 affected component

Tinyexr Project Tinyexr=0.9.5

Event History

Jun 16, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is CVE-2018-12504?

CVE-2018-12504 is a vulnerability in the tinyexr library version 0.9.5 that has an assertion failure in the ComputeChannelLayout function in tinyexr.h.

How severe is CVE-2018-12504?

CVE-2018-12504 has a severity keyword of 'high' and a severity value of 7.5 out of 10.

What is the affected software for CVE-2018-12504?

The affected software for CVE-2018-12504 is Tinyexr version 0.9.5.

How can I fix CVE-2018-12504?

To fix CVE-2018-12504, update your Tinyexr library to a version that is not affected by the vulnerability.

Where can I find more information about CVE-2018-12504?

You can find more information about CVE-2018-12504 in the following references: [GitHub - ChijinZ/security_advisories](https://github.com/ChijinZ/security_advisories/tree/master/tinyexr_b53a457) and [GitHub - syoyo/tinyexr](https://github.com/syoyo/tinyexr/issues/82).