Tinyexr Project Tinyexr — known CVE vulnerabilities

Every CVE whose affected-product data names Tinyexr Project Tinyexr, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2018-12064 — CVSS 9.8 (critical): tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h.
• CVE-2018-12092 — CVSS 9.8 (critical): tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
• CVE-2018-12503 — CVSS 9.8 (critical): tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h.
• CVE-2018-12688 — CVSS 9.8 (critical): tinyexr 0.9.5 has a segmentation fault in the wav2Decode function.
• CVE-2022-34300 — CVSS 8.8 (high): In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.
• CVE-2022-38529 — CVSS 7.8 (high): tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.
• CVE-2018-12504 — CVSS 7.5 (high): tinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h.
• CVE-2020-18430 — CVSS 7.5 (high): tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of…
• CVE-2020-18428 — CVSS 7.5 (high): tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of…
• CVE-2018-12687 — CVSS 7.5 (high): tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.
• CVE-2018-12093 — CVSS 7.5 (high): tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h.
• CVE-2018-20652 — CVSS 6.5 (medium): An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote…
• CVE-2020-19490 — CVSS 5.5 (medium): tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.