CVE-2018-12687: High severity tinyexr vulnerability
Published Jun 22, 2018
·Updated
tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.
Affected Software
1 affected component
Tinyexr Project Tinyexr=0.9.5
Event History
Jun 22, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-12687.
2
What is the severity of CVE-2018-12687?
The severity of CVE-2018-12687 is high with a score of 7.5.
3
Which software version is affected by CVE-2018-12687?
The software version affected by CVE-2018-12687 is tinyexr 0.9.5.
4
What is the description of CVE-2018-12687?
CVE-2018-12687 is a vulnerability in tinyexr 0.9.5 that has an assertion failure in DecodePixelData in tinyexr.h.
5
How can I fix CVE-2018-12687?
To fix CVE-2018-12687, it is recommended to update to a fixed version of tinyexr.