openexr vulnerabilities (Alpaquita)
39 vulnerabilities.
openexrAlpaquitalibIex-3_4-33-3.4.14-1.1 on GA mediaNo scoreopenexrAlpaquitaOpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow7.1 HighopenexrAlpaquitaOpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images5.5 MediumopenexrAlpaquitaOpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union7.1 HighopenexrAlpaquitaOpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision7.1 HighopenexrAlpaquitaOpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)6.7 MediumopenexrAlpaquitaOpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure4.3 MediumopenexrAlpaquitaOpenEXR: Empty multiView viewFromChannelName file crash5.5 MediumopenexrAlpaquitaOpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP325.5 MediumopenexrAlpaquitaOpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP325.5 MediumopenexrAlpaquitaOpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP325.5 MediumopenexrAlpaquitaOpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms7.1 HighopenexrAlpaquitaOpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin7.1 HighopenexrAlpaquitaOpenEXR: exrmetrics deep pixelmode heap buffer overflow7.1 HighopenexrAlpaquitaOpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds7.1 HighopenexrAlpaquitaOpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write7.1 HighopenexrAlpaquitaOpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding5.5 MediumopenexrAlpaquitaOpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow6.5 MediumopenexrAlpaquitaOpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts6.2 MediumopenexrAlpaquitaOpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length6.9 MediumopenexrAlpaquitaOpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability6.1 MediumopenexrAlpaquitaOpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize0.0 NoneopenexrAlpaquitaOpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)7.1 HighopenexrAlpaquitaOpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)8.3 HighopenexrAlpaquitaOpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow6.1 MediumopenexrAlpaquitaOpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)6.3 MediumopenexrAlpaquitaOpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion8.8 HighopenexrAlpaquitaOpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API8.8 HighopenexrAlpaquitaOpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)8.4 HighopenexrAlpaquitaOpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)8.4 HighopenexrAlpaquitaOpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()5.3 MediumopenexrAlpaquitaOpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write8.4 HighopenexrAlpaquitaOpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write8.6 HighopenexrAlpaquitaOpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression5.9 MediumopenexrAlpaquitaOpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)7.1 HighopenexrAlpaquitaOpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.x6.5 MediumopenexrAlpaquitaOpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)8.7 HighopenexrAlpaquitaOpenEXR: integer overflow to OOB write in uncompress_b44_impl()8.4 HighopenexrAlpaquitaOpenEXR: integer overflow lead to OOB in HTJ2K decoder8.4 High