CVE-2020-18430: Tinyexr Project Tinyexr

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

tinyexr 0.9.5 was discovered to contain an array index error in the tinyexr::DecodeEXRImage component, which can lead to a denial of service (DOS).

Affected products

• Tinyexr Project Tinyexr: version 0.9.5 only

Published 2021-07-26. Last modified 2026-06-17.