Описание
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y; and chroma.green.y * (X + Z))) / d; but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | released | 2.2.0-11.1ubuntu1.9 |
| devel | not-affected | 3.1.5-4 |
| esm-apps/focal | released | 2.3.0-6ubuntu0.5+esm1 |
| esm-apps/jammy | released | 2.5.7-1ubuntu0.1~esm1 |
| esm-apps/noble | not-affected | 3.1.5-4 |
| esm-infra/bionic | released | 2.2.0-11.1ubuntu1.9 |
| esm-infra/xenial | released | 2.2.0-10ubuntu2.6+esm3 |
| focal | ignored | end of standard support, was needed |
| hirsute | ignored | end of life |
| impish | ignored | end of life |
Показывать по
2.1 Low
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division o ...
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y * (X + Z))) / d;` but the divisor is not checked for a 0 value. A specially crafted file could trigger a divide-by-zero condition which could affect the availability of programs linked with OpenEXR.
Уязвимость компонента ImfChromaticities.cpp функции RGBtoXYZ() изображений с широкими динамическими диапазоном яркости OpenEXR, позволяющая нарушителю вызвать отказ в обслуживании
2.1 Low
CVSS2
6.5 Medium
CVSS3