CVE-2021-45942

A heap-based-buffer-overflow vulnerability was found in OpenEXR's composite_line() function in the 'ImfCompositeDeepScanLine.cpp' file. This flaw allows an attacker to pass a specially crafted file to OpenEXR, by tricking the victim into opening it, triggering a heap-based buffer overflow. This leads to memory corruption and allows an attacker to cause a denial of service.

This vulnerability does not affect Red Hat Enterprise Linux 6 and 7 because they are shipped with OpenEXR v1.6.1 and v1.7.1 respectively, and the vulnerable code is not present in the code-base.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.