OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file headers, which can lead to excessive memory allocation and performance degradation when processing malicious files. This is fixed in version 3.3.3.

N/A

不加限制或调节的资源分配

OpenEXR 安全漏洞

OpenEXR是Academy Software Foundation开源的一种高动态范围图像（HDR）文件格式的开放标准。 OpenEXR 3.3.2版本存在安全漏洞，该漏洞源于应用程序信任未验证的dataWindow大小值，可能导致处理恶意文件时过度内存分配和性能下降。

N/A

N/A