cve/2020/CVE-2020-15305.md

CVE-2020-15305

Description

An issue was discovered in OpenEXR before 2.5.2. Invalid input could cause a use-after-free in DeepScanLineInputFile::DeepScanLineInputFile() in IlmImf/ImfDeepScanLineInputFile.cpp.

POC

Reference

• https://github.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md
• https://github.com/AcademySoftwareFoundation/openexr/blob/master/SECURITY.md

Github

• https://github.com/Live-Hack-CVE/CVE-2020-15305