OpenEXR unpack_sample_table DeepTiledInputFile readPixelSampleCounts System Failure

The vulnerabilities of the functions unpacksampletable and DeepTiledInputFile::readPixelSampleCounts in software for storing images in OpenEXR format with a wide dynamic range are related to the situation where the operation’s output goes beyond the buffer boundaries during data decoding...

CVE-2026-59983 OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds read. The vulnerability is reached when...

CVE-2026-59983 OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds read. The vulnerability is reached when...

CVE-2026-59983

OpenEXR (the reference implementation for the EXR image format used in the motion picture industry) is affected by an out-of-bounds read on ILP32 builds when decoding a crafted uncompressed deep-tile EXR file. The root cause is an integer wrap in the sample-count table size calculation in OpenEXR...

openexr:openexr_exrcheck_fuzzer: Crash in Imf_3_1::DeepTiledInputFile::readPixelSampleCounts

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=4614577267015680 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerubsanopenexr Platform Id: linux Crash Type: UNKNOWN WRITE Crash...

openexr:openexr_deeptiles_fuzzer: Heap-buffer-overflow in Imf_2_5::DeepTiledInputFile::readPixelSampleCounts

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5078480846585856 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrdeeptilesfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow...