CVE-2021-3477: Integer Overflow
Heap-buffer-overflow in Imf25::DeepTiledInputFile::readPixelSampleCounts
Other sources
There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, subsequently leading to an out-of-bounds read. The greatest risk of this flaw is to application availability.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/OpenEXRto a version that resolves this vulnerability.Fixed in 3.0.0 - Upgrade
Upgrade
redhat/OpeneXRto a version that resolves this vulnerability.Fixed in 2.4.3 - Upgrade
Upgrade
OpenEXRto a version that resolves this vulnerability.Fixed in 3.0.0-beta
Event History
Frequently Asked Questions
What is CVE-2021-3477?
CVE-2021-3477 is a vulnerability in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker can trigger an integer overflow, leading to an out-of-bounds read.
What is the severity of CVE-2021-3477?
The severity of CVE-2021-3477 is medium with a CVSS score of 5.5.
Which software versions are affected by CVE-2021-3477?
Versions before 3.0.0-beta of OpenEXR and Debian Linux 9.0 and 10.0 are affected by CVE-2021-3477.
How can an attacker exploit CVE-2021-3477?
An attacker can exploit CVE-2021-3477 by submitting a crafted file to be processed by OpenEXR, triggering an integer overflow and leading to an out-of-bounds read.
Are there any references for CVE-2021-3477?
Yes, you can find references for CVE-2021-3477 at the following links: [link1](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956), [link2](https://bugzilla.redhat.com/show_bug.cgi?id=1939159), [link3](https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html).