Fedora 44 : mingw-openexr (2026-11097124bf)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-11097124bf advisory. Update to 3.4.9. ---- Update to 3.4.8. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

libIex-3_4-33-3.4.9-1.1 on GA media (moderate)

libIex-34-33-3.4.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:10505-1 Rating: moderate Cross-References: CVE-2026-34378 CVE-2026-34379 CVE-2026-34380 CVE-2026-34543 CVE-2026-34544 CVE-2026-34545 CVE-2026-34588 CVE-2026-34589 CVSS scores: CVE-2026-34378 SUSE : 5.5...

angorapy (>=0.9.1 <=0.10.8), apple-hdr-heic (=0.1.0) +66 more potentially affected by CVE-2026-34543 via openexr (>=3.4.12 <=3.4.4)

openexr PYPI version =3.4.12, =0.9.1, =0.5.0, =0.2.5, =0.1.0rc1, =0.0.1, =0.1.0, =0.2.1, =0.0.4, =0.1.7, =0.0.1, =0.1.1, =0.0.0, =0.0.4 and more Source cves: CVE-2026-34543 Source advisory: OSV:GHSA-VC68-257W-M432...

sfx (=0.1.0) potentially affected by CVE-2026-34543 via openexr (=3.2.4)

openexr PYPI version =3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on openexr and may be impacted: - sfx =0.1.0 Source cves: CVE-2026-34543 Source advisory: OSV:GHSA-VC68-257W-M432...

Linux Distros Unpatched Vulnerability : CVE-2026-34543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version...

CVE-2026-34543

OpenEXR (the EXR image format library) has a heap information disclosure in PXR24 decompression due to unchecked decompressed size, affecting versions 3.4.0 up to but not including 3.4.8. A malicious EXR file read under default settings can leak heap data without user interaction. The issue is re...