4 matches found
CLSA-2026-1785425808 openexr: Fix of 2 CVEs
CVE-2026-34380: fix signed 32-bit integer overflow in the PXR24 decoder bounds check, where uint64t w 3 wrapped to a small positive value and allowed an out-of-bounds write through dout - CVE-2026-34378: fix signed 32-bit integer overflow in srcbuffer pointer arithmetic in the unpack routines,...
CLSA-2026-1785335342 openexr: Fix of 2 CVEs
CVE-2026-34380: fix signed 32-bit integer overflow in the PXR24 decoder bounds check, where uint64t w 3 wrapped to a small positive value and allowed an out-of-bounds write through dout - CVE-2026-34378: fix signed 32-bit integer overflow in srcbuffer pointer arithmetic in the unpack routines,...
USN-8259-1 openexr vulnerabilities
Quang Luong discovered that OpenEXR incorrectly handled sample count accumulation when processing deep scan line image files. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-27622 It was discovered that...
USN-8259-1: OpenEXR vulnerabilities
Quang Luong discovered that OpenEXR incorrectly handled sample count accumulation when processing deep scan line image files. An attacker could possibly use this issue to cause OpenEXR to crash, resulting in a denial of service, or execute arbitrary code. CVE-2026-27622 It was discovered that...