OP
Product
openexr
by AcademySoftwareFoundation · last CVE Aug 25, 2026
47
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 23Medium 20Low 0
Watch

Add openexr to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-55371
6.9
0%
Aug 25
OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length
Affected: >= 3.4.0, < 3.4.13
CVE-2026-65979
6.7
0%
Aug 25
OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)
Affected: >= 3.4.0, < 3.4.13
CVE-2026-68516
6.5
0%
Aug 24
OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow
Affected: >= 3.4.0, < 3.4.14
CVE-2026-45696
6.5
0%
Jun 18
OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)
Affected: >= 3.4.0, < 3.4.11
CVE-2026-34378
6.5
0%
Apr 6
OpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.x
Affected: >= 3.4.0, < 3.4.9
CVE-2026-26981
6.5
1%
Feb 24
OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp
Affected: >= 3.3.0, < 3.3.7; >= 3.4.0, < 3.4.5
CVE-2026-55373
6.2
0%
Aug 25
OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts
Affected: < 3.2.10; >= 3.3.0, < 3.3.12; >= 3.4.0, < 3.4.13
CVE-2025-48073
6.2
0%
Jul 31
OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode
Affected: >= 3.3.2, < 3.3.3
CVE-2026-55059
6.1
0%
Aug 25
OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability
Affected: < 3.2.10; >= 3.3.0, < 3.3.12; >= 3.4.0, < 3.4.13
CVE-2026-34380
5.9
0%
Apr 6
OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression
Affected: >= 3.2.0, < 3.2.7; >= 3.3.0, < 3.3.9; >= 3.4.0, < 3.4.9
CVE-2026-68514
5.5
0%
Aug 25
OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images
Affected: >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14
CVE-2026-61555
5.5
0%
Aug 25
OpenEXR: Empty multiView viewFromChannelName file crash
Affected: < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14
CVE-2026-59985
5.5
0%
Aug 25
OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32
Affected: >= 3.2.0, < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14
CVE-2026-59984
5.5
0%
Aug 25
OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32
Affected: >= 3.1.0, < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14
CVE-2026-59983
5.5
0%
Aug 25
OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32
Affected: < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14
CVE-2026-59183
5.5
0%
Aug 25
OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding
Affected: >= 3.1.0, < 3.2.11; >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14
CVE-2025-48074
5.5
0%
Aug 1
OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors
Affected: >= 3.3.2, < 3.3.3
CVE-2026-39886
5.3
0%
Apr 21
OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()
Affected: >= 3.4.0, < 3.4.10
CVE-2026-34589
5.0
0%
Apr 6
OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write
Affected: >= 3.2.0, < 3.2.7; >= 3.3.0, < 3.3.9; >= 3.4.0, < 3.4.9
CVE-2026-62986
4.3
0%
Aug 25
OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure
Affected: >= 3.3.0, < 3.3.13; >= 3.4.0, < 3.4.14
Showing 20