OpenEXR NULL Pointer Dereference Vulnerability in Deep Scanline Processing

A NULL pointer dereference vulnerability has been identified in OpenEXR version 3.3.2. This issue occurs in the 'reduceMemory' mode when reading deep scanline images with a large sample count. The vulnerability can lead to a crash of the target application due to a NULL pointer being dereferenced during a write operation. The problem has been addressed in version 3.3.3.

Impact

Exploiting this vulnerability can cause a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by compiling the 'exrcheck' binary with AddressSanitizer (ASAN) enabled, and then using this binary to open a crafted EXR file that triggers the NULL pointer dereference. The application will crash, and the ASAN stack trace will indicate the cause of the crash.

Remediation

Users can upgrade to OpenEXR version 3.3.3 to address this vulnerability.