{"id":"CVE-2020-16588","aliases":["AZL-44706","DEBIAN-CVE-2020-16588","DLA-2491-1","DLA-3236-1","EUVD-2020-8549","GHSA-p928-c9c9-qw29","MGASA-2021-0015","SUSE-SU-2020:3931-1","SUSE-SU-2020:3934-1","UBUNTU-CVE-2020-16588","USN-4676-1","openSUSE-SU-2020:2349-1","openSUSE-SU-2020:2351-1"],"status":"published","title":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in...","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01219,"percentile":0.68869,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2020-12-09T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:12","package":"openexr","fixed_in":["2.5.3-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openexr","fixed_in":["2.5.3-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openexr","fixed_in":["2.5.3-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"openexr","fixed_in":["2.2.0-10ubuntu2.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openexr","fixed_in":["2.2.0-11.1ubuntu1.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openexr","fixed_in":["2.3.0-6ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.0-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-2"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-11+deb9u2"}]}],"versions":["2.2.0-11","2.2.0-11+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-4.1+deb10u2"}]}],"versions":["2.2.1-4.1","2.2.1-4.1+deb10u1"],"bundled":22},{"source":"osv","ecosystem":"Mageia:7","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2.3.mga7"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-6.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-6.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-6.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-6.26.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP1","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP2","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-3.21.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-10ubuntu2.4"}]}],"versions":["2.2.0-1ubuntu3","2.2.0-7ubuntu1","2.2.0-9ubuntu1","2.2.0-10ubuntu2","2.2.0-10ubuntu2.1","2.2.0-10ubuntu2.2","2.2.0-10ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-11.1ubuntu1.4"}]}],"versions":["2.2.0-11ubuntu1","2.2.0-11.1ubuntu1","2.2.0-11.1ubuntu1.1","2.2.0-11.1ubuntu1.2","2.2.0-11.1ubuntu1.3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-6ubuntu0.3"}]}],"versions":["2.2.1-4.1ubuntu1","2.3.0-6","2.3.0-6build1","2.3.0-6ubuntu0.1","2.3.0-6ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-10ubuntu2.4"}]}],"versions":["2.2.0-1ubuntu3","2.2.0-7ubuntu1","2.2.0-9ubuntu1","2.2.0-10ubuntu2","2.2.0-10ubuntu2.1","2.2.0-10ubuntu2.2","2.2.0-10ubuntu2.3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-11.1ubuntu1.4"}]}],"versions":["2.2.0-11ubuntu1","2.2.0-11.1ubuntu1","2.2.0-11.1ubuntu1.1","2.2.0-11.1ubuntu1.2","2.2.0-11.1ubuntu1.3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-6ubuntu0.3"}]}],"versions":["2.2.1-4.1ubuntu1","2.3.0-6","2.3.0-6build1","2.3.0-6ubuntu0.1","2.3.0-6ubuntu0.2"],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-lp151.4.15.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.1-lp152.7.8.1"}]}],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"openexr","product":"openexr"}],"references":[{"url":"https://github.com/AcademySoftwareFoundation/openexr/issues/493","tags":["x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://github.com/AcademySoftwareFoundation/openexr/commit/74504503cff86e986bac441213c403b0ba28d58f","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-16588","tags":["web"]},{"url":"https://github.com/advisories/GHSA-p928-c9c9-qw29"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-16588","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0015.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=26914","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/LKDRVXORM2VLNHRLFKS3JHRABSHZ5W5M/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4418-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4676-1","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203931-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179879","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16587","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16588","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16589","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203934-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-16588","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-16588","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-16587","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-16589","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/D4FRZPNDH3SM5DRWM4ITYTYRZIOVKUGB/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ESEVYLX65LTFDH2ZVMY2Y4AN2MUHW5M5/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-16588","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","status":"published","published":"2020-12-09T00:00:00Z","modified":"2024-08-04T13:37:54.245Z","updated_at":"2026-11-02T14:35:59.116379Z"}],"euvd":[{"id":"EUVD-2020-8549","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","status":"published","published":"2020-12-09T00:00:00Z","modified":"2024-08-04T13:37:54Z","updated_at":"2026-11-03T03:07:28.222143Z"}],"ghsa":[{"id":"GHSA-p928-c9c9-qw29","title":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in...","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","status":"published","published":"2022-05-24T17:35:29Z","modified":"2023-01-27T05:04:59Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:42:35.607674Z"}],"nvd":[{"id":"CVE-2020-16588","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","status":"published","published":"2020-12-09T21:15:14.913Z","modified":"2026-06-17T02:58:03.1Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:06:27.10541Z"}],"osv":[{"id":"AZL-44706","title":"CVE-2020-16588 affecting package OpenEXR 2.3.0-6","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","status":"published","published":"2020-12-09T21:15:14Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"CVE-2020-16588","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","status":"published","published":"2020-12-09T21:15:14.913Z","modified":"2026-10-24T19:11:40.490687899Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"DEBIAN-CVE-2020-16588","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","status":"published","published":"2020-12-09T21:15:14.913Z","modified":"2026-10-26T12:00:46.030795119Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:33.384087Z"},{"id":"UBUNTU-CVE-2020-16588","description":"A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file.","status":"published","published":"2020-12-09T21:15:00Z","modified":"2026-04-22T12:31:46.202089Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"DLA-2491-1","title":"openexr - security update","status":"published","published":"2020-12-13T00:00:00Z","modified":"2026-03-09T01:23:16.126368Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DLA-3236-1","title":"openexr - security update","status":"published","published":"2022-12-12T00:00:00Z","modified":"2026-03-09T01:21:37.851393Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2021-0015","title":"Updated openexr packages fix security vulnerabilities","description":"An issue was discovered in OpenEXR before 2.5.2. An invalid tiled input file\ncould cause invalid memory access in TiledInputFile::TiledInputFile() in\nIlmImf/ImfTiledInputFile.cpp, as demonstrated by a NULL pointer dereference\n(CVE-2020-15304).\n\nAn issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a\nuse-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in\nIlmImf/ImfDeepScanLineInputFile.cpp (CVE-2020-15305).\n\nAn issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount attributes\ncould cause a heap buffer overflow in getChunkOffsetTableSize() in\nIlmImf/ImfMisc.cpp (CVE-2020-15306).\n\nA heap-based buffer overflow vulnerability exists in Academy Software\nFoundation OpenEXR 2.3.0 in chunkOffsetReconstruction in\nImfMultiPartInputFile.cpp that can cause a denial of service via a crafted EXR\nfile (CVE-2020-16587).\n\nA Null Pointer Deference issue exists in Academy Software Foundation OpenEXR\n2.3.0 in generatePreview in makePreview.cpp that can cause a denial of\nservice via a crafted EXR file (CVE-2020-16588).\n\nA head-based buffer overflow exists in Academy Software Foundation OpenEXR\n2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of\nservice via a crafted EXR file (CVE-2020-16589).\n","status":"published","published":"2021-01-10T19:46:12Z","modified":"2026-04-16T04:40:50.104922296Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"openSUSE-SU-2020:2349-1","title":"Security update for openexr","description":"This update for openexr fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp (bsc#1179879).\n- CVE-2020-16588: Fixed a null pointer deference in generatePreview (bsc#1179879).\n- CVE-2020-16589: Fixed a heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp (bsc#1179879).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-12-27T17:22:23Z","modified":"2026-02-04T03:36:39.134384Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"openSUSE-SU-2020:2351-1","title":"Security update for openexr","description":"This update for openexr fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp (bsc#1179879).\n- CVE-2020-16588: Fixed a null pointer deference in generatePreview (bsc#1179879).\n- CVE-2020-16589: Fixed a heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp (bsc#1179879).\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-12-28T05:22:09Z","modified":"2026-02-04T04:23:07.786848Z","updated_at":"2026-11-02T16:58:31.879684Z"},{"id":"SUSE-SU-2020:3931-1","title":"Security update for openexr","description":"This update for openexr fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp (bsc#1179879).\n- CVE-2020-16588: Fixed a null pointer deference in generatePreview (bsc#1179879).\n- CVE-2020-16589: Fixed a heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp (bsc#1179879).\n","status":"published","published":"2020-12-23T17:21:05Z","modified":"2026-02-04T03:00:11.019121Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2020:3934-1","title":"Security update for openexr","description":"This update for openexr fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2020-16587: Fixed a heap-based buffer overflow in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp (bsc#1179879).\n- CVE-2020-16588: Fixed a null pointer deference in generatePreview (bsc#1179879).\n- CVE-2020-16589: Fixed a heap-based buffer overflow in writeTileData in ImfTiledOutputFile.cpp (bsc#1179879).\n","status":"published","published":"2020-12-24T11:37:22Z","modified":"2026-02-04T03:04:23.729033Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"USN-4676-1","title":"openexr vulnerabilities","description":"It was discovered that OpenEXR incorrectly handled certain malformed EXR\nimage files. If a user were tricked into opening a crafted EXR image file,\na remote attacker could cause a denial of service, or possibly execute\narbitrary code.\n","status":"published","published":"2021-01-05T13:26:15Z","modified":"2026-04-22T10:12:17.973788Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}