CVE-2018-12064
CVE-2018-12064
This page contains facts from public vulnerability sources. Check the original advisory before updating.
tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h.
CVSS 9.8 · Critical · EPSS 1.3%
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
tinyexr Ubuntu:22.04:LTS
- Versions
- 1.0.0+dfsg-1
- 1.0.1+dfsg-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tinyexr Ubuntu:24.04:LTS
- Versions
- 1.0.7+dfsg-1
- 1.0.8+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tinyexr Ubuntu:25.10
- Versions
- 1.0.10+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tinyexr Ubuntu:26.10
- Versions
- 1.0.12+dfsg-1
- 1.0.13+dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
tinyexr Ubuntu:26.04:LTS
- Versions
- 1.0.10+dfsg-1
- 1.0.12+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published