CVE-2018-12688: Input Validation
Published Jun 22, 2018
·Updated
tinyexr 0.9.5 has a segmentation fault in the wav2Decode function.
Affected Software
1 affected component
Tinyexr Project Tinyexr=0.9.5
Event History
Jun 22, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-12688?
CVE-2018-12688 is a vulnerability in tinyexr 0.9.5 that causes a segmentation fault in the wav2Decode function.
2
What is the severity of CVE-2018-12688?
CVE-2018-12688 has a severity rating of 9.8, which is classified as critical.
3
How does CVE-2018-12688 affect tinyexr?
CVE-2018-12688 affects tinyexr 0.9.5 and can cause a segmentation fault in the wav2Decode function.
4
How can I fix CVE-2018-12688?
To fix CVE-2018-12688, it is recommended to update to a version of tinyexr that is not affected by this vulnerability.
5
Where can I find more information about CVE-2018-12688?
For more information about CVE-2018-12688, you can refer to the following link: [GitHub Issue](https://github.com/syoyo/tinyexr/issues/83).