CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HCVE-2021-26945
Medium (5.5) in openexr openexr. EPSS 0.7% chance of exploitation in the next 30 days.
An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-11-01)
- CWEs
- CWE-190, CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- openexr:openexr