CVE-2026-34379

OpenEXR 3.4.9 addresses multiple CVEs including CVE-2026-34379: Misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression). Affected component: LossyDctDecoder in the DWA/DWAB path; root cause is a misaligned write that can cause undefined behavior. This up...

PT-2026-30658

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.2.0 through 3.2.6, version 3.3.9, and version 3.4.9 Description A memory write issue exists in the LossyDctDecoder execute function within src/lib/OpenEXRCore/internal dwa decoder.h:749 when decoding DWA or DWAB-compressed E...