OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

Important: Red Hat Security Advisory: openexr security update

An update for openexr is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

RHEL 10 : openexr (RHSA-2026:69609)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69609 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents...

AlmaLinux 10 : openexr (ALSA-2026:69609)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:69609 advisory. OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files CVE-2026-68515 Tenable has extracted the preceding description block directly fr...

RHEL 9 : openexr (RHSA-2026:69608)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69608 advisory. OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents ...

Oracle Linux 9 : openexr (ELSA-2026-69608)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69608 advisory. 3.1.1-3.4 - fix CVE-2026-68515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

ALSA-2026:69609 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

ALSA-2026:69608 Important: openexr security update

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...

SUSE SLES12 Security Update : openexr (SUSE-SU-2026:4005-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4005-1 advisory. - CVE-2026-59186: On ILP32, the Array2D tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, an...

SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2026:4003-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4003-1 advisory. - CVE-2026-59184: invalid heap pointer, causing out-of-bounds or use-after-free writes bsc1276849. -...

CVE-2026-65979

A flaw was found in OpenEXR's HTJ2K decoder. A local user could be tricked into opening a specially crafted EXR image file. When processed, the decoder reads beyond the bounds of an allocated buffer due to an unvalidated header length field. This out-of-bounds read can lead to a denial of service...

CVE-2026-59983

A flaw was found in OpenEXR. A remote attacker could exploit an out-of-bounds read vulnerability by providing a specially crafted uncompressed deep-tile EXR image file. This crafted file causes an error in the sample-count table size calculation, leading to a wrap-around before processing the ful...

CVE-2026-59982

A flaw was found in OpenEXR. A remote attacker could provide a specially crafted deep EXR image file, which, when processed by a user, could lead to an out-of-bounds pointer being returned by the TypedDeepImageChannel::row function. This vulnerability could cause the application to crash Denial o...

CVE-2026-59186

A flaw was found in OpenEXR, a widely used image format library. A remote attacker could exploit this by providing a specially crafted tiled EXR file. When processed on a 32-bit system, an integer overflow occurs during buffer size calculation, leading to a heap out-of-bounds write. This could...

CVE-2026-59189

A flaw was found in OpenEXR. An attacker could provide a specially crafted deep image that, when processed, would cause an out-of-bounds read in the TypedDeepImageChannel::row API if the image has a non-zero dataWindow origin. This vulnerability can lead to a heap out-of-bounds read, resulting in...

CVE-2026-59981

A flaw was found in OpenEXR. An attacker can craft a malicious deep EXR image file that, when opened by an application, can lead to an out-of-bounds read in the OpenEXRUtil library's SampleCountChannel::row API. This vulnerability can result in information disclosure, where adjacent heap memory i...

CVE-2026-59184

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing a specially crafted EXR image file with a nonzero dataWindow.min. This could cause the TypedFlatImageChannel::row function to return an invalid memory pointer, leading to out-of-bounds or use-after-free...

CVE-2026-59187

A flaw was found in OpenEXR. The exrmetrics tool is vulnerable to a heap out-of-bounds write when processing a specially crafted deep scanline EXR image. This occurs during pixel conversion operations, where the tool attempts to write floating-point data into buffers allocated for half-float data...