CVE-2026-62986

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings return stale heap data when reading a crafted deep scanline EXR that uses...

CVE-2026-62986

OpenEXR versions 3.3.0–3.3.12 and 3.4.0–3.4.13 are affected by a stale heap data disclosure in the PyOpenEXR Python bindings. When reading a crafted deep scanline EXR file with layer-prefixed RGB channels (e.g., left.R, left.G, left.B), the lane-offset logic in PyPart::setDeepSliceData() only rec...

CVE-2026-62986 OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13, the PyOpenEXR Python bindings return stale heap data when reading a crafted deep scanline EXR that uses...