Aller au contenu
en Se connecter
5.5 Moyenne

CVE-2026-59984 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture…

Description

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds write. When a crafted B44-compressed scanline EXR causes the logical scratch size to truncate before allocation and uncompress_b44_impl() writes using the attacker-controlled channel width, allowing denial of service and memory corruption. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

Produits et versions touchés

Produit Versions touchées Corrigé en
openexr 3.4 3.4.0 → < 3.4.14 3.4.14
openexr 3.3 3.3.0 → < 3.3.13 3.3.13
openexr 3.1 3.1.0 → < 3.2.11 3.2.11

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de openexr

Les 47 CVE de openexr →
CVE-2026-59981 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion… 7.1 Élevée CVE-2026-68514 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion… 5.5 Moyenne CVE-2026-68515 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture… 7.1 Élevée CVE-2026-68513 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture… 7.1 Élevée
Suivre cette CVE