Python Library OpenEXR 3.4.0 < 3.4.13 DoS (CVE-2026-53532)

The version of the OpenEXR Python package installed on the remote host is 3.4.x prior to 3.4.13. It is, therefore, affected by a denial of service vulnerability: - A crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted...

Python Library OpenEXR 3.4.0 < 3.4.14 DoS (CVE-2026-68516)

The version of the OpenEXR Python package installed on the remote host is 3.4.x prior to 3.4.14. It is, therefore, affected by a denial of service vulnerability: - A crafted HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the first tile outside the visible image can reach invalid tile and...

cv-depot (>=0.4.2, <=0.12.0), flatiron (>=0.20.1, <=0.26.0) +2 more potentially affected by CVE-2017-9112 via openexr (1.3.8)

openexr PYPI version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on openexr and may be impacted: - cv-depot =0.4.2, =0.20.1, =0.4.0, =0.5.0 Source cves: CVE-2017-9112 Source advisory: OSV:PYSEC-2026-727...

Use After Free

Overview OpenEXR is a Python bindings for the OpenEXR image file format Affected versions of this package are vulnerable to Use After Free via the PyObjectStealAttrString function. An attacker can execute arbitrary code or cause a crash by passing a dangling pointer to APIs such as PyLongAsLong o...

Buffer Overflow

Overview Affected versions of this package are vulnerable to Buffer Overflow via the channels and channel functions in the legacy Python adapter. An attacker can cause application crashes or achieve code execution by opening specially crafted EXR files or passing malicious Python objects...

cv-depot (>=0.4.2, <=0.12.0), flatiron (>=0.20.1, <=0.26.0) +2 more potentially affected by CVE-2017-9111 via openexr (1.3.8)

openexr PYPI version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on openexr and may be impacted: - cv-depot =0.4.2, =0.20.1, =0.4.0, =0.5.0 Source cves: CVE-2017-9111 Source advisory: OSV:GHSA-QXH9-R8XW-7V99...

cv-depot (>=0.4.2, <=0.12.0), flatiron (>=0.20.1, <=0.26.0) +2 more potentially affected by CVE-2017-9112 via openexr (1.3.8)

openexr PYPI version 1.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on openexr and may be impacted: - cv-depot =0.4.2, =0.20.1, =0.4.0, =0.5.0 Source cves: CVE-2017-9112 Source advisory: OSV:GHSA-8M57-J273-2QG9...