OP
Vendor
Openexr
78
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-45696 | OP Openexr Openexr | 6.5 | Jun 18 | OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS) |
| CVE-2026-44663 | OP Openexr Openexr | 7.1 | Jun 18 | OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow |
| CVE-2026-42217 | OP Openexr Openexr | 9.8 | May 7 | OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`) |
| CVE-2026-42216 | OP Openexr Openexr | 9.1 | May 7 | OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion |
| CVE-2026-41142 | OP Openexr Openexr | 8.8 | May 7 | OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API |
| CVE-2026-40250 | OP Openexr Openexr | 7.1 | Apr 21 | OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589) |
| CVE-2026-40244 | OP Openexr Openexr | 7.1 | Apr 21 | OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589) |
| CVE-2026-39886 | OP Openexr Openexr | 5.3 | Apr 21 | OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl() |
| CVE-2026-34589 | OP Openexr Openexr | 5.0 | Apr 6 | OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write |
| CVE-2026-34588 | OP Openexr Openexr | 7.8 | Apr 6 | OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write |
| CVE-2026-34380 | OP Openexr Openexr | 5.9 | Apr 6 | OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression |
| CVE-2026-34379 | OP Openexr Openexr | 7.1 | Apr 6 | OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression) |
| CVE-2026-34378 | OP Openexr Openexr | 6.5 | Apr 6 | OpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.x |
| CVE-2026-34543 | OP Openexr Openexr | 7.5 | Apr 1 | OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl) |
| CVE-2026-34544 | OP Openexr Openexr | 7.3 | Apr 1 | OpenEXR: integer overflow to OOB write in uncompress_b44_impl() |
| CVE-2026-34545 | OP Openexr Openexr | 7.3 | Apr 1 | OpenEXR: integer overflow lead to OOB in HTJ2K decoder |
| CVE-2026-27622 | OP Openexr Openexr | 7.8 | Mar 3 | OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write |
| CVE-2026-26981 | OP Openexr Openexr | 6.5 | Feb 24 | OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp |
| CVE-2025-12840 | OP Openexr Openexr | 7.8 | Dec 23 | Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-12839 | OP Openexr Openexr | 7.8 | Dec 23 | Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-12495 | OP Openexr Openexr | 7.8 | Dec 23 | Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability |
| CVE-2025-64183 | OP Openexr Openexr | 7.5 | Nov 10 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry |
| CVE-2025-64182 | OP Openexr Openexr | 7.8 | Nov 10 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry |
| CVE-2025-64181 | OP Openexr Openexr | 7.5 | Nov 10 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry |
| CVE-2025-48074 | OP Openexr Openexr | 5.5 | Aug 1 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry |
| CVE-2025-48073 | OP Openexr Openexr | 6.2 | Jul 31 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry |
| CVE-2025-48072 | OP Openexr Openexr | 9.1 | Jul 31 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry |
| CVE-2025-48071 | OP Openexr Openexr | 7.8 | Jul 31 | OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry |
| CVE-2024-31047 | OP Openexr Openexr | 3.3 | Apr 8 | An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp |
| CVE-2023-5841 | OP Openexr Openexr | 9.1 | Feb 1 | Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version… |
| CVE-2021-20304 | OP Openexr Openexr | 7.5 | Aug 23 | A flaw was found in OpenEXR's hufDecode functionality |
| CVE-2021-20298 | OP Openexr Openexr | 7.5 | Aug 23 | A flaw was found in OpenEXR's B44Compressor |
| CVE-2021-3941 | OP Openexr Openexr | 6.5 | Mar 25 | In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma.white.y;` and `chroma.green.y… |
| CVE-2021-3933 | OP Openexr Openexr | 5.5 | Mar 25 | An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits |
| CVE-2021-20299 | OP Openexr Openexr | 7.5 | Mar 16 | A flaw was found in OpenEXR's Multipart input file functionality |
| CVE-2021-20303 | OP Openexr Openexr | 6.1 | Mar 4 | A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp |
| CVE-2021-20302 | OP Openexr Openexr | 5.5 | Mar 4 | A flaw was found in OpenEXR's TiledInputFile functionality |
| CVE-2021-20300 | OP Openexr Openexr | 5.5 | Mar 4 | A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp |
| CVE-2021-45942 | OP Openexr Openexr | 5.5 | Jan 1 | OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and… |
| CVE-2021-3605 | OP Openexr Openexr | 5.5 | Aug 25 | There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5 |
| CVE-2021-3598 | OP Openexr Openexr | 5.5 | Jul 6 | There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5 |
| CVE-2021-26945 | OP Openexr Openexr | 5.5 | Jun 8 | An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1 |
| CVE-2021-26260 | OP Openexr Openexr | 5.5 | Jun 8 | An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1 |
| CVE-2021-23215 | OP Openexr Openexr | 5.5 | Jun 8 | An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1 |
| CVE-2021-23169 | OP Openexr Openexr | 8.8 | Jun 8 | A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1 |
| CVE-2021-20296 | OP Openexr Openexr | 5.3 | Apr 1 | A flaw was found in OpenEXR in versions before 3.0.0-beta |
| CVE-2021-3479 | OP Openexr Openexr | 5.5 | Mar 31 | There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta |
| CVE-2021-3478 | OP Openexr Openexr | 5.5 | Mar 31 | There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta |
| CVE-2021-3477 | OP Openexr Openexr | 5.5 | Mar 31 | There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta |
| CVE-2021-3476 | OP Openexr Openexr | 5.3 | Mar 30 | A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta |
| CVE-2021-3475 | OP Openexr Openexr | 5.3 | Mar 30 | There is a flaw in OpenEXR in versions before 3.0.0-beta |
| CVE-2021-3474 | OP Openexr Openexr | 5.3 | Mar 30 | There's a flaw in OpenEXR in versions before 3.0.0-beta |
| CVE-2020-16589 | OP Openexr Openexr | 5.5 | Dec 9 | A head-based buffer overflow exists in Academy Software Foundation OpenEXR 2.3.0 in writeTileData in ImfTiledOutputFile.cpp that can cause a denial of service via a crafted EXR… |
| CVE-2020-16588 | OP Openexr Openexr | 5.5 | Dec 9 | A Null Pointer Deference issue exists in Academy Software Foundation OpenEXR 2.3.0 in generatePreview in makePreview.cpp that can cause a denial of service via a crafted EXR file |
| CVE-2020-16587 | OP Openexr Openexr | 5.5 | Dec 9 | A heap-based buffer overflow vulnerability exists in Academy Software Foundation OpenEXR 2.3.0 in chunkOffsetReconstruction in ImfMultiPartInputFile.cpp that can cause a denial of… |
| CVE-2020-15306 | OP Openexr Openexr | 5.5 | Jun 26 | An issue was discovered in OpenEXR before v2.5.2 |
| CVE-2020-15305 | OP Openexr Openexr | 5.5 | Jun 26 | An issue was discovered in OpenEXR before 2.5.2 |
| CVE-2020-15304 | OP Openexr Openexr | 5.5 | Jun 26 | An issue was discovered in OpenEXR before 2.5.2 |
| CVE-2020-11765 | OP Openexr Openexr | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 |
| CVE-2020-11764 | OP Openexr Openexr | 5.5 | Apr 14 | An issue was discovered in OpenEXR before 2.4.1 |