OP
Product
openexr
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 23Medium 20Low 0
Watch
Add openexr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55371 | 6.9 | Aug 25 | OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length Affected: >= 3.4.0, < 3.4.13 |
| CVE-2026-65979 | 6.7 | Aug 25 | OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN) Affected: >= 3.4.0, < 3.4.13 |
| CVE-2026-68516 | 6.5 | Aug 24 | OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow Affected: >= 3.4.0, < 3.4.14 |
| CVE-2026-45696 | 6.5 | Jun 18 | OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS) Affected: >= 3.4.0, < 3.4.11 |
| CVE-2026-34378 | 6.5 | Apr 6 | OpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.x Affected: >= 3.4.0, < 3.4.9 |
| CVE-2026-26981 | 6.5 | Feb 24 | OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp Affected: >= 3.3.0, < 3.3.7; >= 3.4.0, < 3.4.5 |
| CVE-2026-55373 | 6.2 | Aug 25 | OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts Affected: < 3.2.10; >= 3.3.0, < 3.3.12; >= 3.4.0, < 3.4.13 |
| CVE-2025-48073 | 6.2 | Jul 31 | OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode Affected: >= 3.3.2, < 3.3.3 |
| CVE-2026-55059 | 6.1 | Aug 25 | OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability Affected: < 3.2.10; >= 3.3.0, < 3.3.12; >= 3.4.0, < 3.4.13 |
| CVE-2026-34380 | 5.9 | Apr 6 | OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression Affected: >= 3.2.0, < 3.2.7; >= 3.3.0, < 3.3.9; >= 3.4.0, < 3.4.9 |
| CVE-2026-68514 | 5.5 | Aug 25 | OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images Affected: >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14 |
| CVE-2026-61555 | 5.5 | Aug 25 | OpenEXR: Empty multiView viewFromChannelName file crash Affected: < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14 |
| CVE-2026-59985 | 5.5 | Aug 25 | OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32 Affected: >= 3.2.0, < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14 |
| CVE-2026-59984 | 5.5 | Aug 25 | OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32 Affected: >= 3.1.0, < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14 |
| CVE-2026-59983 | 5.5 | Aug 25 | OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32 Affected: < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14 |
| CVE-2026-59183 | 5.5 | Aug 25 | OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding Affected: >= 3.1.0, < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14 |
| CVE-2025-48074 | 5.5 | Aug 1 | OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors Affected: >= 3.3.2, < 3.3.3 |
| CVE-2026-39886 | 5.3 | Apr 21 | OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl() Affected: >= 3.4.0, < 3.4.10 |
| CVE-2026-34589 | 5.0 | Apr 6 | OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write Affected: >= 3.2.0, < 3.2.7; >= 3.3.0, < 3.3.9; >= 3.4.0, < 3.4.9 |
| CVE-2026-62986 | 4.3 | Aug 25 | OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure Affected: >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14 |
Showing 20
