OP
Product
Openexr
78
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 25Medium 45Low 1
Watch
Add Openexr to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42217 | 9.8 | May 7 | OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`) Affected: 3.0.0 before 3.2.9; 3.3.0 before 3.3.11; 3.4.0 before 3.4.11 |
| CVE-2026-42216 | 9.1 | May 7 | OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion Affected: 3.0.0 before 3.2.9; 3.3.0 before 3.3.11; 3.4.0 before 3.4.11 |
| CVE-2025-48072 | 9.1 | Jul 31 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry Affected: 3.3.2 |
| CVE-2023-5841 | 9.1 | Feb 1 | Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version… Affected: through 3.2.1 |
Showing 4