AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792627161)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792627161 advisory. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In...

OSV-2026-1355 UNKNOWN READ in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<Imf_4_0::Name, I

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=568469733 Crash type: UNKNOWN READ Crash state: std::1::pairstd::1::treeiteratorstd::1::valuetypeImf40::Name, I Imf40::Header::insert Imf40::initialize...

openexr:openexr_exrcheck_fuzzer: Crash in std::__1::pair<std::__1::__tree_iterator<std::__1::__value_type<Imf_4_0::Name, I

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5073224988426240 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerubsanopenexr Platform Id: linux Crash Type: UNKNOWN READ Crash...

CVE-2026-55059

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059: Out-of-bounds Write

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...

CVE-2026-55059: Out-of-bounds Write

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The row-based...