3239 matches found
JLSEC-2026-813 Crafted HTJ2K compressed EXR files can trigger out of bounds reads in OpenEXR
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.11, the HTJ2K High-Throughput JPEG 2000 decoder, htundoimpl in OpenEXRCore is vulnerable to a heap-buffer-overflow READ. The htundoimp...
PT-2026-69226
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, readVariableLengthInteger decodes a variable-length integer fro...
SUSE SLES12 Security Update : openexr (SUSE-SU-2026:3168-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3168-1 advisory. This update for openexr fixes the following issue - CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can lead to a...
SUSE SLED15 / SLES15 Security Update : openexr (SUSE-SU-2026:3169-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3169-1 advisory. This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in...
Oracle Linux 10 : openexr (ELSA-2026-19146)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19146 advisory. - fix CVE-2026-41142 - fix CVE-2026-42216 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
Security update for openexr
This update for openexr fixes the following issues CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can lead to an invalid delete via uninitialized pointers bsc1269703. CVE-2026-55059: row setter utilizing dataWindow.min.x instead of min.y can lead to a heap...
SUSE-SU-2026:3169-1 Security update for openexr
This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can lead to an invalid delete via uninitialized pointers bsc1269703. - CVE-2026-55059: row setter utilizing dataWindow.min.x instead of min.y can lead to a he...
SUSE-SU-2026:3168-1 Security update for openexr
This update for openexr fixes the following issue - CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can lead to an invalid delete via uninitialized pointers bsc1269703...
Security update for openexr
This update for openexr fixes the following issue CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can lead to an invalid delete via uninitialized pointers bsc1269703. Patch Instructions: To install this SUSE update use the SUSE recommended installation method...
ANT-2026-QQ2P9M9V · openexr · Heap-buffer-overflow
heap-buffer-overflow high CVE-2026-45696 Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-QQ2P9M9V: Heap-buffer-overflow in...
openexr security update
3.1.10-8.3 - fix CVE-2026-41142 - fix CVE-2026-42216 3.1.10-8.2 - fix CVE-2026-34588...
Oracle Linux 10 : openexr (ELSA-2026-38499)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-38499 advisory. - fix CVE-2026-41142 - fix CVE-2026-42216 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Not...
SUSE SLES16: libIex-3_2-31 / libIex-3_2-31-x86-64-v3 / libIlmThread-3_2-31 / etc (SUSE-SU-2026:22653-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22653-1 advisory. This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize followed by an...
openSUSE 16: libIex-3_2-31 / libIex-3_2-31-x86-64-v3 / libIlmThread-3_2-31 / etc (openSUSE-SU-2026:21336-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21336-1 advisory. This update for openexr fixes the following issues - CVE-2026-54920: unchecked integer overflows in Image::resize followed by an exception can...
RLSA-2026:38499 Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
openexr security update
An update is available for openexr. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenEXR is an open-source high-dynamic-range floating-point image file forma...
RLSA-2026:38498 Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
openexr security update
An update is available for openexr. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenEXR is an open-source high-dynamic-range floating-point image file format...