Skip to main content

Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

© 2026 Mondoo, Inc.

Log in Get Assessment

UBUNTU-CVE-2020-11758 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceUBUNTU-CVE-2020-11758

UBUNTU-CVE-2020-11758

MEDIUM5.5

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.

Published Apr 14, 2020

Modified 1 months ago

Fix available

Details

An issue was discovered in OpenEXR before 2.4.1. There is an out-of-bounds read in ImfOptimizedPixelReading.h.

Affected Packages

openexr

Ubuntu 16.04 LTS

Fixed in:

2.2.0-10ubuntu2.2

openexr

Ubuntu 18.04 LTS

Fixed in:

2.2.0-11.1ubuntu1.2

openexr

Ubuntu 20.04 LTS

Fixed in:

2.3.0-6ubuntu0.1

References

https://github.com/AcademySoftwareFoundation/openexr/blob/master/CHANGES.md#version-241-february-11-2020

https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v2.4.1

https://ubuntu.com/security/CVE-2020-11758

https://ubuntu.com/security/notices/USN-4339-1

https://www.cve.org/CVERecord?id=CVE-2020-11758

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Upstream

Related

Ecosystems

Ubuntu 16.04 LTS Ubuntu 18.04 LTS Ubuntu 20.04 LTS

Timeline

PublishedApr 14, 2020

ModifiedApr 22, 2026