CVE 2017-9112

In OpenEXR 2.2.0, an invalid read of size 1 in the getBits function in ImfHuf.cpp could cause the application to crash.

Related bugs and status

CVE-2017-9112 (Candidate) is related to these bugs:

Bug #1742243: Please merge with Debian unstable 2.2.0-11.1

Summary				In	Importance	Status
	1742243	Please merge with Debian unstable 2.2.0-11.1		openexr (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.