{"id":"CVE-2021-23169","aliases":["ALPINE-CVE-2021-23169","AZL-44256","DEBIAN-CVE-2021-23169","EUVD-2021-10279","GHSA-f3pg-chcp-5ff8","MGASA-2021-0326","OESA-2021-1238","UBUNTU-CVE-2021-23169"],"status":"published","title":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions...","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02291,"percentile":0.83463,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-787"],"published":"2021-06-08T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openexr","fixed_in":["3.1.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openexr","fixed_in":["2.5.4-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openexr","fixed_in":["2.5.4-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openexr","fixed_in":["2.5.4-2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.0-6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.4-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.4-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.4-2"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0-2.4.mga7"}]}],"bundled":12},{"source":"osv","ecosystem":"Mageia:8","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.7-1.mga8"}]}],"bundled":12},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-20.oe1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.1-4.1ubuntu1","2.3.0-6","2.3.0-6build1","2.3.0-6ubuntu0.1","2.3.0-6ubuntu0.2","2.3.0-6ubuntu0.3","2.3.0-6ubuntu0.5","2.3.0-6ubuntu0.5+esm1","2.3.0-6ubuntu0.5+esm2"]}],"products":[{"vendor":"academysoftwarefoundation","product":"openexr"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"openexr","product":"openexr"}],"references":[{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KYNJSMVA6YJY5NMKDZ5SAISKZG2KCKC/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BXFLD4ZAXKAIWO6ZPBCQEEDZB5IG676K/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947612","tags":["x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://security.gentoo.org/glsa/202210-31","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23169","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4KYNJSMVA6YJY5NMKDZ5SAISKZG2KCKC/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BXFLD4ZAXKAIWO6ZPBCQEEDZB5IG676K/"},{"url":"https://github.com/advisories/GHSA-f3pg-chcp-5ff8"},{"url":"https://security.alpinelinux.org/vuln/CVE-2021-23169","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-23169","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0326.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29005","tags":["report"]},{"url":"https://www.openexr.com/","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-4900-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4996-1","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/4KYNJSMVA6YJY5NMKDZ5SAISKZG2KCKC/","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-26260","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23215","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-23169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23169","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-23169","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2021-06-08T00:00:00Z","modified":"2024-08-03T19:05:53.909Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:33:00.819444Z"}],"euvd":[{"id":"EUVD-2021-10279","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2021-06-08T00:00:00Z","modified":"2024-08-03T19:05:53Z","updated_at":"2026-11-03T03:25:00.591933Z"}],"ghsa":[{"id":"GHSA-f3pg-chcp-5ff8","title":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions...","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2022-05-24T19:04:21Z","modified":"2023-01-30T05:01:46Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:46:28.825002Z"}],"nvd":[{"id":"CVE-2021-23169","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2021-06-08T12:15:10.413Z","modified":"2026-06-17T03:38:22.48Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:54.439974Z"}],"osv":[{"id":"ALPINE-CVE-2021-23169","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2021-06-08T12:15:10.413Z","modified":"2026-11-03T06:32:27.332289436Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:57.723967Z"},{"id":"AZL-44256","title":"CVE-2021-23169 affecting package OpenEXR 2.3.0-6","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2021-06-08T12:15:10Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:20.107976Z"},{"id":"CVE-2021-23169","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2021-06-08T12:15:10.413Z","modified":"2026-10-24T10:31:06.768695969Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:18.367807Z"},{"id":"DEBIAN-CVE-2021-23169","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2021-06-08T12:15:10.413Z","modified":"2026-10-23T18:03:12.336935782Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"OESA-2021-1238","title":"OpenEXR security update","description":"OpenEXR is a high dynamic-range (HDR) image file format originally developed by Industrial Light \u0026amp; Magic for use in computer imaging applications.\r\n\r\nSecurity Fix(es):\r\n\r\nAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR. This is a different flaw from CVE-2021-23215.(CVE-2021-26260)\r\n\r\nAn integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an application compiled with OpenEXR.(CVE-2021-23215)\r\n\r\nA heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.(CVE-2021-23169)","status":"published","published":"2021-06-26T11:04:28Z","modified":"2026-08-18T01:15:44.799626049Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"UBUNTU-CVE-2021-23169","description":"A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute arbitrary code with the permissions of the user running the application compiled against OpenEXR.","status":"published","published":"2021-06-08T12:15:00Z","modified":"2026-05-08T12:25:22.953708Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:26.779273Z"},{"id":"MGASA-2021-0326","title":"Updated openexr packages fix security vulnerabilities","description":"Updated openexr packages fix security vulnerabilities:\n\nIt was discovered that OpenEXR incorrectly handled certain malformed EXR\nimage files. If a user were tricked into opening a crafted EXR image file,\na remote attacker could cause a denial of service, or possibly execute\narbitrary code (CVE-2021-3474, CVE-2021-3475, CVE-2021-3476, CVE-2021-3477,\nCVE-2021-3478, CVE-2021-3479, CVE-2021-3598, CVE-2021-3605, CVE-2021-20296,\nCVE-2021-23169, CVE-2021-23215, CVE-2021-26260).\n","status":"published","published":"2021-07-10T12:56:54Z","modified":"2026-04-16T04:42:39.83798364Z","updated_at":"2026-11-02T15:49:41.509337Z"}]}}