CVE-2021-3476: Integer Overflow or Wraparound

March 30, 2021 (updated February 2, 2023)

A flaw was found in OpenEXR’s B44 uncompression functionality. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=24787
bugzilla.redhat.com/show_bug.cgi?id=1939145
nvd.nist.gov/vuln/detail/CVE-2021-3476

Code Behaviors & Features

Detect and mitigate CVE-2021-3476 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →