CVE-2020-19490: Tinyexr Project Tinyexr

Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days.

tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.

Affected products

• Tinyexr Project Tinyexr: version 0.9.5 only

Published 2021-07-21. Last modified 2026-06-17.