CVE:CVE-2021-23215
CNNVD:CNNVD-202105-201
Industrial Light and Magic OpenEXR是美国工业光魔（Industrial Light and Magic）公司的一种图像文件格式，适用于高动态范围（HDR）图像。
Industrial Light And Magic OpenEXR 中存在资源管理错误漏洞，该漏洞源于在 OpenEXR 的 DwaCompressor 中发现了导致堆缓冲区溢出的整数溢出。
solution:Upgrade openexr openexr to a higher version than 3.0.1,and avoid the version (,3.0.1); Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33; Upgrade debian debian_linux to a higher version than 9.0,10.0,11.0,and avoid the version 9.0,10.0,11.0