Aller au contenu
en Se connecter
5.5 Moyenne

CVE-2026-59985 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture…

Description

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.2.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to a heap out-of-bounds read. The issue occurs when a crafted RLE-compressed EXR causes the 64-bit unpacked size to truncate before allocation in OpenEXRCore decoding.c and unpack_32bit() reads beyond the resulting buffer, allowing denial of service. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

Produits et versions touchés

Produit Versions touchées Corrigé en
openexr 3.4 3.4.0 → < 3.4.14 3.4.14
openexr 3.3 3.3.0 → < 3.3.13 3.3.13
openexr 3.2 3.2.0 → < 3.2.11 3.2.11

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de openexr

Les 47 CVE de openexr →
CVE-2026-59981 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion… 7.1 Élevée CVE-2026-68514 OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion… 5.5 Moyenne CVE-2026-68515 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture… 7.1 Élevée CVE-2026-68513 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture… 7.1 Élevée
Suivre cette CVE