Out-of-Bounds Read in OpenEXR ILP32 Builds

Executive Summary

This vulnerability is an out-of-bounds read issue affecting OpenEXR, a format used in the motion picture industry. It occurs on 32-bit systems (ILP32 builds) when processing malformed deep-tiled EXR files. The problem stems from integer overflow during size calculations, causing the program to read beyond allocated memory. This can lead to crashes or denial of service.

Useful 0 Not Useful 0

Detection Guidance

Detect this vulnerability by checking OpenEXR versions on ILP32 systems. Use commands like 'exrheader --version' or 'ldd /path/to/libOpenEXRCore.so | grep OpenEXR' to verify versions. Affected versions are 3.2.0-3.2.10, 3.3.0-3.3.12, and 3.4.0-3.4.13. Test with malformed deep-tile EXR files to trigger crashes or use AddressSanitizer (ASAN) for detection during processing.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can cause applications using OpenEXR to crash, leading to denial of service. It may also corrupt memory or allow limited data exposure, though arbitrary code execution was not proven. Users on 32-bit systems are most at risk when processing untrusted EXR files.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability primarily causes denial of service through application crashes, which may impact availability of systems processing EXR files. It does not directly affect confidentiality or integrity of data, but could disrupt operations handling sensitive media files subject to GDPR or HIPAA. Compliance may be indirectly affected if the denial of service impacts systems storing or processing protected data.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade OpenEXR to patched versions 3.2.11, 3.3.13, or 3.4.14. Avoid processing untrusted EXR files on ILP32 systems. If using 32-bit environments, consider migrating to 64-bit builds where this issue does not apply. Monitor for crashes during EXR file processing as potential indicators of exploitation.

Useful 0 Not Useful 0