{ "CVE_data_meta": { "ASSIGNER": "cve@mitre.org", "ID": "CVE-2020-11760", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read during RLE uncompression in rleUncompress in ImfRle.cpp." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "url": "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1", "refsource": "MISC", "name": "https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1" }, { "url": "https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020", "refsource": "MISC", "name": "https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020" }, { "url": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1987", "refsource": "MISC", "name": "https://bugs.chromium.org/p/project-zero/issues/detail?id=1987" }, { "refsource": "UBUNTU", "name": "USN-4339-1", "url": "https://usn.ubuntu.com/4339-1/" }, { "refsource": "FEDORA", "name": "FEDORA-2020-e244f22a51", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/F4KFGDQG5PVYAU7TS5MZ7XCS6EMPVII3/" }, { "refsource": "SUSE", "name": "openSUSE-SU-2020:0682", "url": "http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00051.html" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT211288", "url": "https://support.apple.com/kb/HT211288" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT211290", "url": "https://support.apple.com/kb/HT211290" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT211289", "url": "https://support.apple.com/kb/HT211289" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT211291", "url": "https://support.apple.com/kb/HT211291" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT211293", "url": "https://support.apple.com/kb/HT211293" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT211295", "url": "https://support.apple.com/kb/HT211295" }, { "refsource": "CONFIRM", "name": "https://support.apple.com/kb/HT211294", "url": "https://support.apple.com/kb/HT211294" }, { "refsource": "DEBIAN", "name": "DSA-4755", "url": "https://www.debian.org/security/2020/dsa-4755" }, { "refsource": "MLIST", "name": "[debian-lts-announce] 20200830 [SECURITY] [DLA 2358-1] openexr security update", "url": "https://lists.debian.org/debian-lts-announce/2020/08/msg00056.html" }, { "refsource": "GENTOO", "name": "GLSA-202107-27", "url": "https://security.gentoo.org/glsa/202107-27" } ] } }