CVE-2020-16588: Null Pointer Dereference
Published Dec 9, 2020
·Updated
A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.
Affected Software
2 affected components
OpenEXR OpenEXR=2.3.0
Debian Debian Linux=10.0
Remediation
Event History
Dec 9, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is CVE-2020-16588?
CVE-2020-16588 is a Null Pointer Deference issue in Academy Software Foundation OpenEXR 2.3.0 that can cause a denial of service via a crafted EXR file.
2
How severe is CVE-2020-16588?
CVE-2020-16588 has a severity rating of 5.5 (medium).
3
What software versions are affected by CVE-2020-16588?
Academy Software Foundation OpenEXR 2.3.0 and Debian Debian Linux 10.0 are affected by CVE-2020-16588.
4
How can CVE-2020-16588 be exploited?
CVE-2020-16588 can be exploited by using a crafted EXR file.
5
How can I fix CVE-2020-16588?
To fix CVE-2020-16588, you should update to the latest version of Academy Software Foundation OpenEXR or apply the necessary patches.