{"id":"CVE-2023-5841","aliases":["ALPINE-CVE-2023-5841","ALSA-2024:8800","ALSA-2024:9548","AZL-62324","CLSA-2025-1749743322","DEBIAN-CVE-2023-5841","EUVD-2023-58123","GHSA-gxmr-rxpv-c8fq","JLSEC-2026-133","OESA-2024-1215","OESA-2024-1216","OESA-2024-1217","OESA-2024-1218","RHSA-2024:8800","RHSA-2024:8801","RHSA-2024:8802","RHSA-2024:9548","RLSA-2024:8800","RLSA-2024:9548","ROOT-OS-DEBIAN-12-CVE-2023-5841","UBUNTU-CVE-2023-5841","openSUSE-SU-2024:13683-1"],"status":"published","title":"OpenEXR Heap Overflow in Scanline Deep Data Parsing","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01248,"percentile":0.6955,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2024-02-01T18:28:05Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Alpine:v3.19","package":"openexr","fixed_in":["3.1.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openexr","fixed_in":["3.1.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openexr","fixed_in":["3.1.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openexr","fixed_in":["3.1.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openexr","fixed_in":["3.1.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openexr","fixed_in":["3.1.12-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"openexr","fixed_in":["3.1.1-2.el9_4.1","3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"openexr-devel","fixed_in":["3.1.1-2.el9_4.1","3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"openexr-libs","fixed_in":["3.1.1-2.el9_4.1","3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openexr","fixed_in":["3.1.1-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openexr-devel","fixed_in":["3.1.1-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openexr-libs","fixed_in":["3.1.1-2.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openexr","fixed_in":["3.1.13-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openexr","fixed_in":["3.1.13-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"OpenEXR_jll","fixed_in":["3.2.4+0"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"OpenEXR","fixed_in":["3.1.5-2.oe2203"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"OpenEXR","fixed_in":["3.1.5-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"OpenEXR","fixed_in":["3.1.5-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"OpenEXR","fixed_in":["3.1.5-2.oe2203sp3"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-debuginfo","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-debugsource","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-libs","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-libs-debuginfo","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-debuginfo","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-debugsource","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-devel","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-libs-debuginfo","fixed_in":["0:3.1.1-2.el9_4.1","0:3.1.1-2.el9_5.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr-debuginfo","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr-debugsource","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr-libs","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr-libs-debuginfo","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"openexr-debuginfo","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"openexr-debugsource","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"openexr-devel","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"openexr-libs-debuginfo","fixed_in":["0:3.1.1-2.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr","fixed_in":["0:3.1.1-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr-debuginfo","fixed_in":["0:3.1.1-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr-debugsource","fixed_in":["0:3.1.1-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr-libs","fixed_in":["0:3.1.1-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr-libs-debuginfo","fixed_in":["0:3.1.1-2.el9_0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"openexr","fixed_in":["0:3.1.1-2.el9_4.1"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"openexr","fixed_in":["3.1.5-5.root.io.8","3.1.5-5.root.io.9","3.1.5-5.root.io.10","3.1.5-5.root.io.7","3.1.5-5.root.io.3","3.1.5-5.root.io.1","3.1.5-5.root.io.5","3.1.5-5.root.io.4","3.1.5-5.root.io.15","3.1.5-5.root.io.6","3.1.5-5.root.io.2","3.1.5-5.root.io.21","3.1.5-5.root.io.22","3.1.5-5.root.io.12","3.1.5-5.root.io.23","3.1.5-5.root.io.13","3.1.5-5.root.io.14","3.1.5-5.root.io.11","3.1.5-5.root.io.16","3.1.5-5.root.io.17","3.1.5-5.root.io.18","3.1.5-5.root.io.19","3.1.5-5.root.io.20","3.1.5-5.aikido.24","3.1.5-5.aikido.25"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-openexr","fixed_in":["3.1.5-5.root.io.8","3.1.5-5.root.io.9","3.1.5-5.root.io.10","3.1.5-5.root.io.7","3.1.5-5.root.io.3","3.1.5-5.root.io.1","3.1.5-5.root.io.5","3.1.5-5.root.io.4","3.1.5-5.root.io.15","3.1.5-5.root.io.6","3.1.5-5.root.io.2","3.1.5-5.root.io.21","3.1.5-5.root.io.22","3.1.5-5.root.io.12","3.1.5-5.root.io.23","3.1.5-5.root.io.13","3.1.5-5.root.io.14","3.1.5-5.root.io.11","3.1.5-5.root.io.16","3.1.5-5.root.io.17","3.1.5-5.root.io.18","3.1.5-5.root.io.19","3.1.5-5.root.io.20","3.1.5-5.aikido.24","3.1.5-5.aikido.25"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.12-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openexr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openexr-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openexr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"openexr-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"2.3.0-6"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openexr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openexr-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.1-2.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.13-1","3.1.13-2","3.1.5-5","3.1.5-5.1","3.1.5-5.1+hurd.1","3.4.14-0.1","3.4.15+ds-1","3.4.16+ds-1","3.4.6+ds-1","3.4.6+ds-2","3.4.6+ds-3","3.4.6+ds-4","3.5.2+ds-1"]},{"source":"osv","ecosystem":"Debian:13","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.13-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.13-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"OpenEXR_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.2.4+0"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-2.oe2203"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"OpenEXR","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-2.oe2203sp3"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openexr-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"openexr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"openexr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"openexr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::crb","package":"openexr-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openexr-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"openexr-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"openexr-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_5.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.1-2.el9_4.1"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-5.root.io.8"},{"fixed":"3.1.5-5.root.io.9"},{"fixed":"3.1.5-5.root.io.10"},{"fixed":"3.1.5-5.root.io.7"},{"fixed":"3.1.5-5.root.io.3"},{"fixed":"3.1.5-5.root.io.1"},{"fixed":"3.1.5-5.root.io.5"},{"fixed":"3.1.5-5.root.io.4"},{"fixed":"3.1.5-5.root.io.15"},{"fixed":"3.1.5-5.root.io.6"},{"fixed":"3.1.5-5.root.io.2"},{"fixed":"3.1.5-5.root.io.21"},{"fixed":"3.1.5-5.root.io.22"},{"fixed":"3.1.5-5.root.io.12"},{"fixed":"3.1.5-5.root.io.23"},{"fixed":"3.1.5-5.root.io.13"},{"fixed":"3.1.5-5.root.io.14"},{"fixed":"3.1.5-5.root.io.11"},{"fixed":"3.1.5-5.root.io.16"},{"fixed":"3.1.5-5.root.io.17"},{"fixed":"3.1.5-5.root.io.18"},{"fixed":"3.1.5-5.root.io.19"},{"fixed":"3.1.5-5.root.io.20"},{"fixed":"3.1.5-5.aikido.24"},{"fixed":"3.1.5-5.aikido.25"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.5-5.root.io.8"},{"fixed":"3.1.5-5.root.io.9"},{"fixed":"3.1.5-5.root.io.10"},{"fixed":"3.1.5-5.root.io.7"},{"fixed":"3.1.5-5.root.io.3"},{"fixed":"3.1.5-5.root.io.1"},{"fixed":"3.1.5-5.root.io.5"},{"fixed":"3.1.5-5.root.io.4"},{"fixed":"3.1.5-5.root.io.15"},{"fixed":"3.1.5-5.root.io.6"},{"fixed":"3.1.5-5.root.io.2"},{"fixed":"3.1.5-5.root.io.21"},{"fixed":"3.1.5-5.root.io.22"},{"fixed":"3.1.5-5.root.io.12"},{"fixed":"3.1.5-5.root.io.23"},{"fixed":"3.1.5-5.root.io.13"},{"fixed":"3.1.5-5.root.io.14"},{"fixed":"3.1.5-5.root.io.11"},{"fixed":"3.1.5-5.root.io.16"},{"fixed":"3.1.5-5.root.io.17"},{"fixed":"3.1.5-5.root.io.18"},{"fixed":"3.1.5-5.root.io.19"},{"fixed":"3.1.5-5.root.io.20"},{"fixed":"3.1.5-5.aikido.24"},{"fixed":"3.1.5-5.aikido.25"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"openexr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.1.5-5.1","3.1.5-5.1build1","3.1.5-5.1build2","3.1.5-5.1build3","3.1.5-5.1ubuntu0.1~esm1"]}],"products":[{"vendor":"academy software foundation","product":"openexr"},{"vendor":"academysoftwarefoundation","product":"openexr"},{"vendor":"openexr","product":"openexr"}],"references":[{"url":"https://takeonme.org/cves/CVE-2023-5841.html","tags":["x_transferred","Exploit","Third Party Advisory","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LSB6DB5LAKGPLRXEF5HDNGUMT7GIFT2C/","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMINVKQLSUHECXBSQMZFCSDRIHFOJJI/","tags":["x_transferred","web"]},{"url":"http://seclists.org/fulldisclosure/2024/Sep/36","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2024/Sep/34","tags":["web"]},{"url":"http://seclists.org/fulldisclosure/2024/Sep/32","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5841","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LSB6DB5LAKGPLRXEF5HDNGUMT7GIFT2C"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XWMINVKQLSUHECXBSQMZFCSDRIHFOJJI"},{"url":"https://github.com/advisories/GHSA-gxmr-rxpv-c8fq"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-5841","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8800","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5841","tags":["report"]},{"url":"https://bugzilla.redhat.com/2262397","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-8800.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9548","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9548.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1749743322.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/5xxx/CVE-2023-5841.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-5841","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1215","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1216","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1217","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1218","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2262397","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8800.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5841","tags":["advisory","report"]},{"url":"https://takeonme.org/cves/CVE-2023-5841.html#","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8801","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8801.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:8802","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_8802.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9548.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:8800","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:9548","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-5841","tags":["report"]},{"url":"https://github.com/AcademySoftwareFoundation/openexr/issues/1625","tags":["report"]},{"url":"https://github.com/AcademySoftwareFoundation/openexr/commit/46944c3a87ebc6c5d9a9a4962a94569ba1082bc3","tags":["report"]},{"url":"https://github.com/AcademySoftwareFoundation/openexr/pull/1627","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-5841","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-5841","title":"OpenEXR Heap Overflow in Scanline Deep Data Parsing","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2024-02-01T18:28:05.892Z","modified":"2025-11-04T16:10:52.466Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:16.771348Z"}],"euvd":[{"id":"EUVD-2023-58123","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2024-02-01T18:28:05Z","modified":"2025-11-04T16:10:52Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T19:49:28.888576Z"}],"ghsa":[{"id":"GHSA-gxmr-rxpv-c8fq","title":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep...","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability.","status":"published","published":"2024-02-01T21:30:31Z","modified":"2026-03-20T05:07:02Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:06:44.064136Z"}],"nvd":[{"id":"CVE-2023-5841","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2024-02-01T19:15:08.097Z","modified":"2026-06-17T06:49:29.033Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"primary"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:09:04.527564Z"}],"osv":[{"id":"ALPINE-CVE-2023-5841","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2024-02-01T19:15:08.097Z","modified":"2026-11-03T06:32:44.1244825Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"AZL-62324","title":"CVE-2023-5841 affecting package OpenEXR 2.3.0-6","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2024-02-01T19:15:08Z","modified":"2026-11-05T05:36:30Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"CVE-2023-5841","title":"OpenEXR Heap Overflow in Scanline Deep Data Parsing","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2024-02-01T18:28:05.892Z","modified":"2026-10-28T02:31:07.100707276Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:36.851042Z"},{"id":"DEBIAN-CVE-2023-5841","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2024-02-01T19:15:08.097Z","modified":"2026-10-26T18:03:10.779172319Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:45:41.533064Z"},{"id":"JLSEC-2026-133","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2026-04-17T15:19:54.657Z","modified":"2026-07-18T00:00:32.422289491Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2024-1215","title":"OpenEXR security update","description":"OpenEXR is a high dynamic-range (HDR) image file format originally developed by Industrial Light \u0026amp; Magic for use in computer imaging applications.\r\n\r\nSecurity Fix(es):\r\n\r\nDue to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.\n(CVE-2023-5841)","status":"published","published":"2024-03-01T11:06:39Z","modified":"2026-08-18T01:18:16.220294064Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1216","title":"OpenEXR security update","description":"OpenEXR is a high dynamic-range (HDR) image file format originally developed by Industrial Light \u0026amp; Magic for use in computer imaging applications.\r\n\r\nSecurity Fix(es):\r\n\r\nDue to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.\n(CVE-2023-5841)","status":"published","published":"2024-03-01T11:06:39Z","modified":"2026-08-18T01:18:16.390164499Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1217","title":"OpenEXR security update","description":"OpenEXR is a high dynamic-range (HDR) image file format originally developed by Industrial Light \u0026amp; Magic for use in computer imaging applications.\r\n\r\nSecurity Fix(es):\r\n\r\nDue to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.\n(CVE-2023-5841)","status":"published","published":"2024-03-01T11:06:39Z","modified":"2026-08-18T01:18:16.396800416Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"OESA-2024-1218","title":"OpenEXR security update","description":"OpenEXR is a high dynamic-range (HDR) image file format originally developed by Industrial Light \u0026amp; Magic for use in computer imaging applications.\r\n\r\nSecurity Fix(es):\r\n\r\nDue to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.\n(CVE-2023-5841)","status":"published","published":"2024-03-01T11:06:39Z","modified":"2026-08-18T01:18:17.280855492Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:52:40.71472Z"},{"id":"RHSA-2024:8800","title":"Red Hat Security Advisory: openexr security update","status":"published","published":"2024-11-13T15:26:19Z","modified":"2026-06-26T12:22:23.447155616Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8801","title":"Red Hat Security Advisory: openexr security update","status":"published","published":"2024-11-13T15:26:32Z","modified":"2026-06-26T12:22:23.564575945Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:8802","title":"Red Hat Security Advisory: openexr security update","status":"published","published":"2024-11-13T15:26:07Z","modified":"2026-03-18T11:36:17.205044Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9548","title":"Red Hat Security Advisory: openexr security update","status":"published","published":"2024-11-21T21:54:35Z","modified":"2026-06-26T12:22:39.706699476Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-5841","title":"CVE-2023-5841 in openexr - Patched by Root","description":"Root has patched CVE-2023-5841 in the openexr package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-09-02T11:23:23Z","modified":"2026-09-02T12:30:06.163004431Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"UBUNTU-CVE-2023-5841","description":"Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This issue was resolved as of versions v3.2.2 and v3.1.12 of the affected library.","status":"published","published":"2024-02-01T19:15:00Z","modified":"2026-05-08T12:52:00.78205Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T16:54:41.555387Z"},{"id":"ALSA-2024:8800","title":"Important: openexr security update","description":"OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  \n\nSecurity Fix(es):  \n\n  * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-04T00:00:00Z","modified":"2026-10-29T11:31:50.228363633Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2024:9548","title":"Important: openexr security update","description":"OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.  \n\nSecurity Fix(es):  \n\n  * OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-13T00:00:00Z","modified":"2026-10-29T11:31:53.673174932Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"CLSA-2025-1749743322","title":"openexr: Fix of CVE-2023-5841","description":"- CVE-2023-5841: fix heap-based buffer overflow vulnerability","status":"published","published":"2025-06-12T15:48:47Z","modified":"2026-06-01T00:30:54.670094605Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"openSUSE-SU-2024:13683-1","title":"libIex-3_1-30-32bit-3.1.11-1.3 on GA media","description":"These are all security issues fixed in the libIex-3_1-30-32bit-3.1.11-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:55:16.96247Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:8800","title":"Important: openexr security update","description":"OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format.  This package containes the binaries for OpenEXR.\n\nSecurity Fix(es):\n\n* OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-11-08T15:57:54.689249Z","modified":"2026-02-04T14:45:03.986883Z","updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"RLSA-2024:9548","title":"Important: openexr security update","description":"OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format.  This package containes the binaries for OpenEXR.\n\nSecurity Fix(es):\n\n* OpenEXR: Heap Overflow in Scanline Deep Data Parsing (CVE-2023-5841)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-11-19T16:02:19.758877Z","modified":"2026-02-04T23:00:02.906082Z","updated_at":"2026-11-02T15:53:24.923365Z"}]}}