exr vulnerabilities and fixes

Recent CVEs affecting exr, with upgrade or downgrade steps. 3 tracked.

exr has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-08-28. Highest priority: CVE-2024-44913 (score 29/100).

• CVE-2024-44915 MEDIUM 5.5 DOWNGRADE An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access viola
• CVE-2024-44914 MEDIUM 5.5 DOWNGRADE An issue in the component EXR!ReadEXR+0x3df50 of Irfanview v4.67.1.0 allows attackers to cause an access viola
• CVE-2024-44913 MEDIUM 5.5 DOWNGRADE An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access viola

FAQ

How do I fix exr vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is exr being exploited right now?

None of the tracked exr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which exr CVE should I patch first?

CVE-2024-44913 currently ranks highest (29/100): An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access viola.

RSS feed for exr · ← Back to latest CVEs