Ilm Openexr — known CVE vulnerabilities

Every CVE whose affected-product data names Ilm Openexr, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-18444 — CVSS 8.8 (high): makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified…
• CVE-2018-18443 — CVSS 4.3 (medium): OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview.