An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.
Integer Overflow
Denial Of Service
Openexr
NVD
GitHub
CVSS 3.1
3.3
EPSS
0.2%
ThreeTen Backport v1.6.8 was discovered to contain a NullPointerException via the component org.threeten.bp.LocalDate::compareTo(ChronoLocalDate). Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Denial Of Service
Null Pointer Dereference
Threeten Backport
NVD
GitHub
VulDB
CVSS 3.1
3.3
EPSS
0.3%