CVE-2021-3933: Debian Linux

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths.

Affected products

• Debian Debian Linux: version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 36 only
• Openexr Openexr: before 3.1.2 (fixed in 3.1.2)

Published 2022-03-25. Last modified 2026-06-17.