CVE-2020-18430 – tinyexr 0.9.5 was discovered to contain an array index error in the tinye

tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18430

Reference (s):

• https://github.com/ChijinZ/security_advisories/tree/master/tinyexr_65f9859
• https://github.com/syoyo/tinyexr/issues/108