VDB
DEBIAN-CVE-2023-5841
DEBIAN-CVE-2023-5841
PUBLISHED
CVSS 9.100000381469727 CRITICAL
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | openexr | 0, 0, 0 |
| Debian:13 | openexr | 0, 0, 0 |
| Debian:12 | openexr | 3.4.6+ds-4, *, 3.1.5-5.1 |
Exploit Intelligence
- macos_v2_generated.go (github-poc)
- macos_v1_generated.go (github-poc)
- ios_v2_generated.go (github-poc)
- ios_v1_generated.go (github-poc)
- visionos_v2_generated.go (github-poc)
- tvos_v2_generated.go (github-poc)
Timeline
- Feb 1, 2024 CVE Published
- Apr 28, 2026 CVE Updated