A flaw was found in OpenEXRs Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dereference. The highest threat from this vulnerability is to system availability.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openexr | Openexr | * | 2.5.4 (excluding) |
| Openexr | Ubuntu | bionic | * |
| Openexr | Ubuntu | esm-infra/bionic | * |
| Openexr | Ubuntu | groovy | * |
| Openexr | Ubuntu | trusty | * |
| Openexr | Ubuntu | upstream | * |
| Openexr | Ubuntu | xenial | * |