OP
Product
Openexr
78
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 25Medium 45Low 1
Watch
Add Openexr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3479 | 5.5 | Mar 31 | There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta Affected: before 2.4.3; 2.5.0 before 2.5.4 |
| CVE-2021-3478 | 5.5 | Mar 31 | There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta Affected: before 2.4.3; 2.5.0 before 2.5.4 |
| CVE-2021-3477 | 5.5 | Mar 31 | There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta Affected: before 2.4.3; 2.5.0 before 2.5.4 |
| CVE-2020-16589 | 5.5 | Dec 9 | A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR… Affected: 2.3.0 |
| CVE-2020-16588 | 5.5 | Dec 9 | A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file Affected: 2.3.0 |
| CVE-2020-16587 | 5.5 | Dec 9 | A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of… Affected: 2.3.0 |
| CVE-2020-15306 | 5.5 | Jun 26 | An issue was discovered in OpenEXR before v2.5.2 Affected: before 2.5.2 |
| CVE-2020-15305 | 5.5 | Jun 26 | An issue was discovered in OpenEXR before 2.5.2 Affected: before 2.5.2 |
| CVE-2020-15304 | 5.5 | Jun 26 | An issue was discovered in OpenEXR before 2.5.2 Affected: before 2.5.2 |
| CVE-2020-11765 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 2.4.1 |
| CVE-2020-11764 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 2.4.1 |
| CVE-2020-11763 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 2.4.1 |
| CVE-2020-11762 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 2.4.1 |
| CVE-2020-11761 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 2.4.1 |
| CVE-2020-11760 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 2.4.1 |
| CVE-2020-11759 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 2.4.1 |
| CVE-2020-11758 | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 Affected: before 2.4.1 |
| CVE-2017-14988 | 5.5 | Oct 3 | Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a crafted file that is accessed… Affected: 2.2.0 |
| CVE-2026-39886 | 5.3 | Apr 21 | OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl() Affected: 3.4.0 before 3.4.10 |
| CVE-2021-20296 | 5.3 | Apr 1 | A flaw was found in OpenEXR in versions before 3.0.0-beta Affected: before 2.4.3; 2.5.0 before 2.5.4 |
| CVE-2021-3476 | 5.3 | Mar 30 | A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta Affected: before 2.4.3; 2.5.0 before 2.5.4 |
| CVE-2021-3475 | 5.3 | Mar 30 | There is a flaw in OpenEXR in versions before 3.0.0-beta Affected: before 2.4.3; 2.5.0 before 2.5.4 |
| CVE-2021-3474 | 5.3 | Mar 30 | There's a flaw in OpenEXR in versions before 3.0.0-beta Affected: before 2.4.3; 2.5.0 before 2.5.4 |
| CVE-2026-34589 | 5.0 | Apr 6 | OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write Affected: 3.2.0 before 3.2.7; 3.3.0 before 3.3.9; 3.4.0 before 3.4.9 |
| CVE-2024-31047 | 3.3 | Apr 8 | An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp Affected: before 3.2.4 |
| CVE-2009-1722 | – | Jul 31 | Heap-based buffer overflow in the compression implementation in OpenEXR 1.2.2 allows context-dependent attackers to cause a denial of service (application crash) or possibly… Affected: 1.2.2 |
| CVE-2009-1721 | – | Jul 31 | The decompression implementation in the Imf::hufUncompress function in OpenEXR 1.2.2 and 1.6.1 allows context-dependent attackers to cause a denial of service (application crash)… Affected: 1.2.2; 1.6.1 |
| CVE-2009-1720 | – | Jul 31 | Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via… Affected: 1.2.2; 1.6.1 |