CVE:CVE-2020-16589
CNNVD:CNNVD-202012-771
Industrial Light And Magic（lim） OpenEXR是美国Industrial Light and Magic（LIM）（Industrial Light And Magic（lim））公司的一种图像文件格式，适用于高动态范围（HDR）图像。
Industrial Light and Magic Academy Software Foundation OpenEXR 2.3.0版本存在缓冲区错误漏洞，该漏洞源于writeTileData in ImfTiledOutputFile.cpp中存在基于头的缓冲区溢出，可以通过精心制作的EXR文件导致拒绝服务。
solution:Upgrade openexr openexr to a higher version than 2.3.0,and avoid the version 2.3.0; Upgrade debian debian_linux to a higher version than 10.0,and avoid the version 10.0