8.4
High
CVE-2026-27622 OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…
Description
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated in vector<unsigned int> total_sizes for attacker-controlled large counts across many parts, total_sizes[ptr] wraps modulo 2^32. overall_sample_count is then derived from wrapped totals and used in samples[channel].resize(overall_sample_count). Decode pointer setup/consumption proceeds with true sample counts, and write operations in core unpack (generic_unpack_deep_pointers) overrun the undersized composite sample buffer. This vulnerability is fixed in v3.2.6, v3.3.8, and v3.4.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v. 8.2) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) | Versions not published | |
| Red Hat Enterprise Linux AppStream AUS (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream E4S (v.8.6) | Versions not published | |
| Red Hat Enterprise Linux AppStream TUS (v.8.6) | Versions not published |
Show the 35 other branches Hide the 35 other branches
References
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Enterprise Linux AppStream EUS (v. 10.0)
The 269 CVEs of Red Hat Enterprise Linux AppStream EUS (v. 10.0) →
CVE-2026-53016
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AF_ALG…
7.8
High
CVE-2026-56208
Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode
7.6
High
CVE-2026-12329
Memory safety bug fixed in Thunderbird ESR 140.12
5.3
Medium
CVE-2026-12328
Memory safety bugs present in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and…
8.1
High