CVE-2020-16588

EUVD-2020-8549 · Published Dec 9, 2020

A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.

Technologies

Debian Debian LinuxOpenexr Openexr

Weaknesses

CWE-476

CVSS scores

v3.15.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
v2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://github.com/AcademySoftwareFoundation/openexr/issues/493
https://github.com/AcademySoftwareFoundation/openexr/commit/74504503cff86e986bac441213c403b0ba28d58f
https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html

Potentially impacted assets

See if this affects your attack surface