CVE-2020-18428: Out-of-bounds Read
Published Jul 26, 2021
·Updated
tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS).
Affected Software
1 affected component
Tinyexr Project Tinyexr=0.9.5
Remediation
Patch Available
Event History
Jul 26, 2021
CVE Published
via MITRE·09:36 PM
Data Sourced
via MITRE·09:36 PM
Description
Frequently Asked Questions
1
What is CVE-2020-18428?
CVE-2020-18428 is a vulnerability in the tinyexr project that allows for a denial of service attack.
2
How severe is CVE-2020-18428?
CVE-2020-18428 has a severity rating of 7.5 (High).
3
What software versions are affected by CVE-2020-18428?
Version 0.9.5 of the tinyexr project is affected by CVE-2020-18428.
4
How can I fix CVE-2020-18428?
To fix CVE-2020-18428, update the tinyexr project to a version that is not affected by the vulnerability.
5
Where can I find more information about CVE-2020-18428?
More information about CVE-2020-18428 can be found at the following references: [reference1], [reference2].