Lucene search
+L

8 matches found

CVE
CVE
added 2026/08/25 6:27 p.m.13 views

CVE-2026-62986

OpenEXR versions 3.3.0–3.3.12 and 3.4.0–3.4.13 are affected by a stale heap data disclosure in the PyOpenEXR Python bindings. When reading a crafted deep scanline EXR file with layer-prefixed RGB channels (e.g., left.R, left.G, left.B), the lane-offset logic in PyPart::setDeepSliceData() only rec...

4.3CVSS5.3AI score
SaveExploits0References4
NVD
NVD
added 2026/08/25 6:17 p.m.5 views

CVE-2026-59982

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...

7.1CVSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/25 5:59 p.m.5 views

EUVD-2026-65690

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...

7.1CVSS5.2AI score
SaveExploits0References4
CVE
CVE
added 2026/08/25 5:59 p.m.11 views

CVE-2026-59982

OpenEXR , the reference implementation for the EXR image format used in the motion picture industry, is affected by an out-of-bounds pointer flaw in TypedDeepImageChannel::row() . A crafted deep EXR file with a nonzero dataWindow origin triggers the issue because the API incorrectly combines zero...

7.1CVSS5.2AI score
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/25 5:59 p.m.18 views

CVE-2026-59982 OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...

7.1CVSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/08/25 5:59 p.m.1 views

CVE-2026-59982 OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...

7.1CVSS5.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/25 12:00 a.m.9 views

PT-2026-81460

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...

7.1CVSS
SaveExploits0References5
OSV
OSV
added 2026/03/26 10:00 a.m.7 views

SUSE-SU-2026:20936-1 Security update for openexr

This update for openexr fixes the following issue: - CVE-2026-27622: crafted multipart deep EXR can cause an heap out-of-bound write bsc1259177...

8.4CVSS5.9AI score0.00201EPSS
SaveExploits2References3
Rows per page
Query Builder