<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: tinyexr project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-38529: tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.</title><link>https://patchthecve.com/cve/CVE-2022-38529.html</link><guid>https://patchthecve.com/cve/CVE-2022-38529.html</guid><pubDate>Wed, 17 Jun 2026 04:56:47 +0000</pubDate><description>HIGH 7.8: tinyexr commit 0647fb3 was discovered to contain a heap-buffer overflow via the component rleUncompress.</description></item><item><title>CVE-2022-34300: In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.</title><link>https://patchthecve.com/cve/CVE-2022-34300.html</link><guid>https://patchthecve.com/cve/CVE-2022-34300.html</guid><pubDate>Wed, 17 Jun 2026 04:50:04 +0000</pubDate><description>HIGH 8.8: In tinyexr 1.0.1, there is a heap-based buffer over-read in tinyexr::DecodePixelData.</description></item><item><title>CVE-2020-18430: tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which c</title><link>https://patchthecve.com/cve/CVE-2020-18430.html</link><guid>https://patchthecve.com/cve/CVE-2020-18430.html</guid><pubDate>Wed, 17 Jun 2026 02:59:18 +0000</pubDate><description>HIGH 7.5: tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).</description></item><item><title>CVE-2020-18428: tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which c</title><link>https://patchthecve.com/cve/CVE-2020-18428.html</link><guid>https://patchthecve.com/cve/CVE-2020-18428.html</guid><pubDate>Wed, 17 Jun 2026 02:59:18 +0000</pubDate><description>HIGH 7.5: tinyexr commit 0.9.5 was discovered to contain an array index error in the tinyexr::SaveEXR component, which can lead to a denial of service (DOS).</description></item><item><title>CVE-2020-19490: tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR c</title><link>https://patchthecve.com/cve/CVE-2020-19490.html</link><guid>https://patchthecve.com/cve/CVE-2020-19490.html</guid><pubDate>Wed, 17 Jun 2026 02:59:48 +0000</pubDate><description>MEDIUM 5.5: tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.</description></item></channel></rss>