CVE-2026-34588 OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

[
  {
    "vendor": "AcademySoftwareFoundation",
    "product": "openexr",
    "versions": [
      {
        "version": ">= 3.1.0, <= 3.1.13",
        "status": "affected"
      },
      {
        "version": ">= 3.2.0, < 3.2.7",
        "status": "affected"
      },
      {
        "version": ">= 3.3.0, < 3.3.9",
        "status": "affected"
      },
      {
        "version": ">= 3.4.0, < 3.4.9",
        "status": "affected"
      }
    ]
  }
]