CVE-2026-65979

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

CVE-2026-65979

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...

PT-2026-81487

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.12 Description The HTJ2K decoder fails to verify if the header-length field PLEN parsed from a chunk's compressed data fits within the available buffer. During decoding, the codestream pointer is advanced by...