EUVD-2026-19347

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write...

Out-of-bounds Write

Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Out-of-bounds Write. through the internalexrundopiz process. An attacker can cause out-of-bounds memory access, leading to potential memory corruption or process crash, by...

DEBIAN-CVE-2026-34588

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internalexrundopiz advances the working wavelet pointer with signed 32-bit arithmetic. Because nx, ny, and...

UBUNTU-CVE-2026-34588

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internalexrundopiz advances the working wavelet pointer with signed 32-bit arithmetic. Because nx, ny, and...

OSV-2022-1098 Heap-buffer-overflow in fasthuf_initialize

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52730 Crash type: Heap-buffer-overflow READ 1 Crash state: fasthufinitialize internalhufdecompress internalexrundopiz...

OSV-2022-666 Heap-buffer-overflow in fasthuf_decode

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49698 Crash type: Heap-buffer-overflow READ 8 Crash state: fasthufdecode internalhufdecompress internalexrundopiz...