CVE-2018-12092

tinyexr 0.9.5 has a heap-based buffer over-read in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code.

Date published : 2018-06-11

https://github.com/syoyo/tinyexr/issues/78