CVE-2020-18430: Out-of-bounds Read
Published Jul 26, 2021
·Updated
tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).
Affected Software
1 affected component
Tinyexr Project Tinyexr=0.9.5
Remediation
Patch Available
Event History
Jul 26, 2021
CVE Published
via MITRE·09:36 PM
Data Sourced
via MITRE·09:36 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2020-18430.
2
What is the severity of CVE-2020-18430?
The severity of CVE-2020-18430 is high, with a severity value of 7.5.
3
What is the affected software?
The affected software is Tinyexr version 0.9.5.
4
What is the impact of this vulnerability?
This vulnerability in Tinyexr 0.9.5 can lead to a denial of service (DOS).
5
Are there any references or additional information for this vulnerability?
Yes, you can find more information about this vulnerability at the following references: [GitHub Advisory](https://github.com/ChijinZ/security_advisories/tree/master/tinyexr_65f9859) and [GitHub issue](https://github.com/syoyo/tinyexr/issues/108).