OP
Product
openexr
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 23Medium 20Low 0
Watch
Add openexr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42217 | 9.8 | May 7 | OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`) Affected: >= 3.0.0, < 3.2.9; >= 3.3.0, < 3.3.11; >= 3.4.0, < 3.4.11 |
| CVE-2026-42216 | 9.1 | May 7 | OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion Affected: >= 3.0.0, < 3.2.9; >= 3.3.0, < 3.3.11; >= 3.4.0, < 3.4.11 |
| CVE-2025-48072 | 9.1 | Jul 31 | OpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds Heap Affected: >= 3.3.2, < 3.3.3 |
Showing 3