CVE-2017-14988 - CVE House
Back to Database
Status published Medium CVE-2017-14988

Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to...

Vulnerability Description

Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed with the ImfOpenInputFile function in IlmImf/ImfCRgbaFile.cpp. NOTE: The maintainer and multiple third parties believe that this vulnerability isn't valid

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-14988

Credits & Attribution

No credits recorded in the NVD database.

References

More from openexr

View All →
CVE-2021-45942
OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in...
Medium 5.5
CVE-2020-16589
A head-based buffer overflow exists in Academy Software Foundation OpenEXR...
Medium 5.5
CVE-2020-16588
A Null Pointer Deference issue exists in Academy Software Foundation...
Medium 5.5
CVE-2020-16587
A heap-based buffer overflow vulnerability exists in Academy Software Foundation...
Medium 5.5
CVE-2020-15306
An issue was discovered in OpenEXR before v2.5.2. Invalid chunkCount...
Medium 5.5

Affected Vendor

Affected Software

openexr
Vulnerable Versions:
2.2.0

Timeline

Official Publish: October 2nd, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.