OSV-2021-1627
Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41416
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
Imf_3_1::LineCompositeTask::execute
IlmThread_3_1::NullThreadPoolProvider::addTask
IlmThread_3_1::ThreadPool::addGlobalTask
What each source reports
OSV No score
Heap-buffer-overflow in Imf_3_1::LineCompositeTask::execute
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41416
Crash type: Heap-buffer-overflow WRITE 2
Crash state:
Imf_3_1::LineCompositeTask::execute
IlmThread_3_1::NullThreadPoolProvider::addTask
IlmThread_3_1::ThreadPool::addGlobalTask
- Record
OSV-2021-1627- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openexrOSS-Fuzz |
Listed versions, plus commit ranges v3.1.0v3.1.0-rc1v3.1.1v3.1.1-rcv3.1.2 Show 4 moreShow lessv3.1.2-rcv3.1.2-rc2v3.1.3v3.1.3-rc |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2021-1627 is a vulnerability with no CVSS score yet in openexr, published November 27, 2021. No source lists public exploit code. A source reports a fix.