CVE-2020-19490: Integer Overflow
Published Jul 21, 2021
·Updated
tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
Affected Software
1 affected component
Tinyexr Project Tinyexr=0.9.5
Remediation
Event History
Jul 21, 2021
CVE Published
via MITRE·05:15 PM
Data Sourced
via MITRE·05:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2020-19490.
2
What is the title of the vulnerability?
The title of the vulnerability is 'tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h related to OpenEXR code.'
3
What is the severity of CVE-2020-19490?
The severity of CVE-2020-19490 is medium with a severity value of 5.5.
4
What is the affected software?
The affected software is tinyexr 0.9.5.
5
How can I fix CVE-2020-19490?
To fix CVE-2020-19490, it is recommended to update to a version of tinyexr that includes the fix.