CVE-2024-31047

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp.

CVSS v3.1

3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

0.22% chance of exploitation in the next 30 days, 12th percentile

Published

2024-04-08

Updated

2024-08-02

Proof-of-concept exploits (1)

• AcademySoftwareFoundation/openexr/issues/1680

References

• CVE Record
• NVD entry

Related

• CVE-2020-16587
• CVE-2020-16588
• CVE-2024-55192
• CVE-2024-55193
• CVE-2024-55194
• CVE-2025-48071