CVE-2026-59984

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds write. When a crafted...

CVE-2026-34544 OpenEXR: integer overflow to OOB write in uncompress_b44_impl()

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that decodes it via...

OSV-2022-419 Heap-buffer-overflow in uncompress_b44_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47503 Crash type: Heap-buffer-overflow READ 2 Crash state: uncompressb44impl defaultdecompresschunk exrdecodingrun...

openexr:openexr_exrcorecheck_fuzzer: Heap-buffer-overflow in uncompress_b44_impl

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=5479947201806336 Project: openexr Fuzzing Engine: honggfuzz Fuzz Target: openexrexrcorecheckfuzzer Job Type: honggfuzzasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflo...

OSV-2021-1646 Heap-buffer-overflow in uncompress_b44_impl

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41625 Crash type: Heap-buffer-overflow READ Crash state: uncompressb44impl defaultdecompresschunk exrdecodingrun...

openexr:openexr_exrcheck_fuzzer: Heap-buffer-overflow in uncompress_b44_impl

Project: https://github.com/AcademySoftwareFoundation/openexr.git Detailed Report: https://oss-fuzz.com/testcase?key=6087419890368512 Project: openexr Fuzzing Engine: libFuzzer Fuzz Target: openexrexrcheckfuzzer Job Type: libfuzzerasanopenexr Platform Id: linux Crash Type: Heap-buffer-overflow RE...