Skip to content
Openexr vulnerabilities
Newest
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more
OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)
CVE-2026-45696
Fix available
8.3 High
-
academysoftwarefoundation openexr
OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow
CVE-2026-44663
Fix available
6.1 Medium
-
academysoftwarefoundation openexr
OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)
CVE-2026-42217
Fix available
6.3 Medium
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 more
OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion
CVE-2026-42216
Fix available
8.8 High
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 10.0 extended update support +7 more +9 more
OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API
CVE-2026-41142
Fix available
8.8 High
-
academysoftwarefoundation openexr
OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)
CVE-2026-40250
Fix available
8.4 High
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more
OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)
CVE-2026-40244
Fix available
8.4 High
-
academysoftwarefoundation openexr
OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()
CVE-2026-39886
Fix available
5.3 Medium
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more
OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write
CVE-2026-34589
Fix available
8.4 High
-
academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +9 more +11 more
OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write
CVE-2026-34588
Fix available
8.6 High
-
academysoftwarefoundation openexr
OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression
CVE-2026-34380
Fix available
5.9 Medium
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more
OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)
CVE-2026-34379
Fix available
7.1 High
-
academysoftwarefoundation openexr
OpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.x
CVE-2026-34378
Fix available
6.5 Medium
-
academysoftwarefoundation openexr
OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)
CVE-2026-34543
Fix available
8.7 High
-
academysoftwarefoundation openexr
OpenEXR: integer overflow to OOB write in uncompress_b44_impl()
CVE-2026-34544
Fix available
8.4 High
-
academysoftwarefoundation openexr, red hat enterprise linux 10, enterprise linux 6 +3 more +5 more
OpenEXR: integer overflow lead to OOB in HTJ2K decoder
CVE-2026-34545
Fix available
8.4 High
-
academysoftwarefoundation openexr, red hat ai inference server 3.3, enterprise linux 10 +17 more +19 more
OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write
CVE-2026-27622
Fix available
8.4 High
-
academysoftwarefoundation openexr
OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp
CVE-2026-26981
Fix available
6.5 Medium
-
academy software foundation openexr
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2025-12840
Fix available
7.8 High
-
academy software foundation openexr
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2025-12839
Fix available
7.8 High
-
academy software foundation openexr
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2025-12495
Fix available
7.8 High
-
academysoftwarefoundation openexr
OpenEXR has use after free in PyObject_StealAttrString
CVE-2025-64183
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()
CVE-2025-64182
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
OpenEXR Makes Use of Uninitialized Memory
CVE-2025-64181
Fix available
2.0 Low
-
academysoftwarefoundation openexr
OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors
CVE-2025-48074
Fix available
4.6 Medium
-
academysoftwarefoundation openexr
OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode
CVE-2025-48073
Fix available
4.6 Medium
-
academysoftwarefoundation openexr
OpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds Heap
CVE-2025-48072
Fix available
6.8 Medium
-
academysoftwarefoundation openexr
OpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline Parsing
CVE-2025-48071
Fix available
8.4 High
-
openexr
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to...
CVE-2024-31047
Fix available
3.3 Low
-
academy software foundation openexr
OpenEXR Heap Overflow in Scanline Deep Data Parsing
CVE-2023-5841
Fix available
9.1 Critical
-
openexr, debian linux, fedoraproject fedora +2 more
OpenEXR 3.1.0 through 3.1.3 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask:...
CVE-2021-45942
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux, fedoraproject fedora +1 more +3 more
In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z ...
CVE-2021-3941
Fix available
6.5 Medium
-
academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 more
An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t <...
CVE-2021-3933
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass...
CVE-2021-20304
Fix available
7.5 High
-
academysoftwarefoundation openexr, debian linux +1 more
A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a...
CVE-2021-20298
Fix available
7.5 High
-
academysoftwarefoundation openexr, debian linux +1 more
A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able...
CVE-2021-20303
Fix available
6.1 Medium
-
academysoftwarefoundation openexr, debian linux +1 more
A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can...
CVE-2021-20302
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux +1 more
A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw...
CVE-2021-20300
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux +1 more
A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file...
CVE-2021-20299
Fix available
7.5 High
-
academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 more
There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker...
CVE-2021-3605
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux, redhat enterprise linux +2 more
There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An...
CVE-2021-3598
Fix available
5.5 Medium
-
academysoftwarefoundation openexr
An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0...
CVE-2021-26945
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, fedoraproject fedora +1 more
A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions...
CVE-2021-23169
Fix available
8.8 High
-
academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 more
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...
CVE-2021-26260
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux, fedoraproject fedora +2 more
An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR...
CVE-2021-23215
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux +1 more
A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an...
CVE-2021-20296
Fix available
5.3 Medium
-
academysoftwarefoundation openexr, debian linux +1 more
There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker...
CVE-2021-3479
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux +1 more
There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An...
CVE-2021-3478
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux +1 more
There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An...
CVE-2021-3477
Fix available
5.5 Medium
-
academysoftwarefoundation openexr, debian linux +1 more
A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An...
CVE-2021-3476
Fix available
5.3 Medium
- Show olderLoading…