tinyexr Project tinyexr 0.9.5
Approved changes feed: RSS · Atom
cpe:2.3:a:tinyexr_project:tinyexr:0.9.5:*:*:*:*:*:*:*part: a version: 0.9.5 update: *
| Vendor | Tinyexr Project (8326e653-c711-526d-8d15-c15f0be980a2) |
|---|---|
| Product | Tinyexr (31a5a9d7-a831-5d83-b0f3-891d12475dda) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/tinyexr |
purl2cpe | 2026-06-01 10:16:29.597891 |
pkg:github/syoyo/tinyexr |
purl2cpe | 2026-06-01 10:16:29.597892 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-19490 |
vulnerable | 2026-06-08 05:20:57.315604 |
Details available
tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.
Published: 2021-07-21T17:15:15.000Z
Updated: 2024-08-04T14:08:30.839Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18430 |
vulnerable | 2026-06-08 05:20:56.971794 |
Details available
tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).
Published: 2021-07-26T21:36:03.000Z
Updated: 2024-08-04T14:00:49.289Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18428 |
vulnerable | 2026-06-08 05:20:56.971175 |
Details available
tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS).
Published: 2021-07-26T21:36:01.000Z
Updated: 2024-08-04T14:00:49.322Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20652 |
vulnerable | 2026-06-08 05:11:27.674639 |
Details available
An attempted excessive memory allocation was discovered in the function tinyexr::AllocateImage in tinyexr.h in tinyexr v0.9.5. Remote attackers could leverage this vulnerability to cause a denial-of-service via crafted input, which leads to an out-of-memory exception.
Published: 2019-01-01T16:00:00.000Z
Updated: 2024-08-05T12:05:17.820Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12688 |
vulnerable | 2026-06-08 05:10:41.882749 |
Details available
tinyexr 0.9.5 has a segmentation fault in the wav2Decode function.
Published: 2018-06-22T19:00:00.000Z
Updated: 2024-09-16T22:55:35.459Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12687 |
vulnerable | 2026-06-08 05:10:41.882444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12504 |
vulnerable | 2026-06-08 05:10:41.649857 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12503 |
vulnerable | 2026-06-08 05:10:41.649549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12093 |
vulnerable | 2026-06-08 05:10:39.817382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12092 |
vulnerable | 2026-06-08 05:10:39.816971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12064 |
vulnerable | 2026-06-08 05:10:39.782074 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.