CVEs-PoC/2021/CVE-2021-20304.md

CVE-2021-20304

Description

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is to system availability.

POC

Reference

• https://github.com/AcademySoftwareFoundation/openexr/pull/849
• https://github.com/AcademySoftwareFoundation/openexr/pull/849

Github

• https://github.com/ARPSyndicate/cvemon