p PatchFirst

CVE-2022-34300

CVE-2022-34300

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.

CVSS 8.8 · High · EPSS 1.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • tinyexr Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.0.1+dfsg-4

    Update to 1.0.1+dfsg-4

  • tinyexr Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.0.1+dfsg-4

    Update to 1.0.1+dfsg-4

  • tinyexr Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.0.1+dfsg-4

    Update to 1.0.1+dfsg-4

  • asymptote Ubuntu:16.04:LTS

    Versions
    • 2.35-2
    • 2.35-2build1
    • 2.35-3
    • 2.35-3build1
    • 2.35-4
    • 2.37-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • love Ubuntu:16.04:LTS

    Versions
    • 0.9.1-3ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mame Ubuntu:16.04:LTS

    Versions
    • 0.160-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • psychtoolbox-3 Ubuntu:16.04:LTS

    Versions
    • 3.0.11.20140816.dfsg1-1ubuntu4
    • 3.0.12.20150725.dfgs1-2ubuntu1
    • 3.0.12.20160126.dfsg1-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rbdoom3bfg Ubuntu:16.04:LTS

    Versions
    • 1.0.3+repack1+git20150625-1build1
    • 1.0.3+repack1+git20150806-1
    • 1.0.3+repack1+git20151103-1
    • 1.0.3+repack1+git20151103-1build1
    • 1.0.3+repack1+git20151124-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • asymptote Ubuntu:18.04:LTS

    Versions
    • 2.41-2build1
    • 2.41-3
    • 2.41-4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • goxel Ubuntu:18.04:LTS

    Versions
    • 0.7.1-2
    • 0.7.2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • love Ubuntu:18.04:LTS

    Versions
    • 0.9.1-4ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mame Ubuntu:Pro:18.04:LTS

    Versions
    • 0.188+dfsg.1-0ubuntu2
    • 0.189+dfsg.1-1
    • 0.192+dfsg.1-0ubuntu1
    • 0.195+dfsg.1-2
    Affected ranges
    • ECOSYSTEM: < 0.195+dfsg.1-2ubuntu0.1~esm1

    Update to 0.195+dfsg.1-2ubuntu0.1~esm1

  • psychtoolbox-3 Ubuntu:18.04:LTS

    Versions
    • 3.0.14.20170103+git6-g605ff5c.dfsg1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-4
    • 5.9.1+dfsg-4ubuntu1
    • 5.9.2+dfsg-2ubuntu1
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.4+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rbdoom3bfg Ubuntu:18.04:LTS

    Versions
    • 1.1.0~preview3+dfsg+git20161019-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • asymptote Ubuntu:20.04:LTS

    Versions
    • 2.51-1
    • 2.59-1
    • 2.60-1
    • 2.61-1
    • 2.62-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • goxel Ubuntu:20.04:LTS

    Versions
    • 0.8.1-1
    • 0.8.1-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • love Ubuntu:20.04:LTS

    Versions
    • 11.1-2
    • 11.3-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mame Ubuntu:Pro:20.04:LTS

    Versions
    • 0.206+dfsg.1-1
    • 0.214+dfsg.1-2
    • 0.215+dfsg.1-1
    • 0.217+dfsg.1-1
    • 0.217+dfsg.1-1build1
    • 0.218+dfsg.1-1
    • 0.220+dfsg.1-1
    Affected ranges
    • ECOSYSTEM: < 0.220+dfsg.1-1ubuntu0.1~esm1

    Update to 0.220+dfsg.1-1ubuntu0.1~esm1

  • psychtoolbox-3 Ubuntu:20.04:LTS

    Versions
    • 3.0.15.20190207.dfsg1-1
    • 3.0.15.20190725.dfsg1-1build1
    • 3.0.16.20200130.dfsg1-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-1ubuntu1
    • 5.12.4+dfsg-1ubuntu3
    • 5.12.5+dfsg-3ubuntu1
    • 5.12.5+dfsg-6ubuntu2
    • 5.12.5+dfsg-7
    • 5.12.5+dfsg-7build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu1.1
    • 5.12.8+dfsg-0ubuntu1.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • rbdoom3bfg Ubuntu:20.04:LTS

    Versions
    • 1.2.0+dfsg~git20181013-1
    • 1.2.0+dfsg~git20191014-1
    • 1.2.0+dfsg~git20191014-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • renderdoc Ubuntu:20.04:LTS

    Versions
    • 1.4+dfsg-1
    • 1.5+dfsg-1
    • 1.5+dfsg-2
    • 1.6+dfsg-1
    • 1.6+dfsg-1build1
    • 1.6+dfsg-1build2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →