Aller au contenu
en Se connecter
5.5 Moyenne

CVE-2026-59183 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture…

Description

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32_t multiplication in OpenEXRCore's unpack_sample_table() can overflow while decoding a crafted deep tiled EXR file, producing an invalid pointer that leads to a read from an unmapped memory address and a crash. Because the overflow occurs in the standard decoding path (exr_decoding_run), any application that decodes deep tiled EXR files is affected. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

Produits et versions touchés

Produit Versions touchées Corrigé en
openexr 3.4 3.4.0 → < 3.4.14 3.4.14
openexr 3.3 3.3.0 → < 3.3.13 3.3.13
openexr 3.1 3.1.0 → < 3.2.11 3.2.11

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de openexr

Les 47 CVE de openexr →
CVE-2026-59981 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion… 7.1 Élevée CVE-2026-68514 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion… 5.5 Moyenne CVE-2026-68515 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture… 7.1 Élevée CVE-2026-68513 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture… 7.1 Élevée
Suivre cette CVE