Skip to main content

Tinyexr CVE-2018-12688

CRITICAL
Improper Input Validation (CWE-20)
2018-06-22 cve@mitre.org
Information Disclosure Tinyexr
9.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
9.8 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jun 22, 2018 - 19:29 nvd
CRITICAL 9.8

DescriptionNVD

tinyexr 0.9.5 has a segmentation fault in the wav2Decode function.

AnalysisAI

tinyexr 0.9.5 has a segmentation fault in the wav2Decode function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. tinyexr 0.9.5 has a segmentation fault in the wav2Decode function. Affected products include: Tinyexr Project Tinyexr.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Tinyexr

View all
CVE-2022-34300 HIGH POC
8.8 Jun 23

In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData. Rated high severity (CVSS 8.8), th
CVE-2022-38529 HIGH POC
7.8 Sep 06

tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress. Rated high seve
CVE-2018-12503 CRITICAL
9.8 Jun 16

tinyexr 0.9.5 has a heap-based buffer over-read in LoadEXRImageFromMemory in tinyexr.h. Rated critical severity (CVSS 9.
CVE-2018-12092 CRITICAL
9.8 Jun 11

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Rated
CVE-2018-12064 CRITICAL
9.8 Jun 08

tinyexr 0.9.5 has a heap-based buffer over-read via tinyexr::ReadChannelInfo in tinyexr.h. Rated critical severity (CVSS
CVE-2018-12687 HIGH
7.5 Jun 22

tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h. Rated high severity (CVSS 7.5), this vulnerabili
CVE-2018-12504 HIGH
7.5 Jun 16

tinyexr 0.9.5 has an assertion failure in ComputeChannelLayout in tinyexr.h. Rated high severity (CVSS 7.5), this vulner
CVE-2018-12093 HIGH
7.5 Jun 11

tinyexr 0.9.5 has a memory leak in ParseEXRHeaderFromMemory in tinyexr.h. Rated high severity (CVSS 7.5), this vulnerabi

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2018-12688 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy