Information Disclosure

🗓️ 04 Apr 2026 05:36:58Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 2 Views

OpenEXR has a memory disclosure vulnerability due to improper heap handling during image decoding.

Reporter	Title	Published	Views	Family All 36
ATTACKERKB	CVE-2026-34543	1 Apr 202620:56	–	attackerkb
AlpineLinux	CVE-2026-34543	1 Apr 202620:56	–	alpinelinux
Chainguard	CVE-2026-34543 vulnerabilities	8 Apr 202601:17	–	cgr
Circl	CVE-2026-34543	1 Apr 202623:27	–	circl
CNNVD	OpenEXR 安全漏洞	1 Apr 202600:00	–	cnnvd
CVE	CVE-2026-34543	1 Apr 202620:56	–	cve
Cvelist	CVE-2026-34543 OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)	1 Apr 202620:56	–	cvelist
Debian CVE	CVE-2026-34543	1 Apr 202620:56	–	debiancve
EUVD	EUVD-2026-18058	3 Apr 202621:50	–	euvd
Fedora	[SECURITY] Fedora 44 Update: mingw-openexr-3.4.9-1.fc44	25 Apr 202601:54	–	fedora

Vulners

Node

openexr openexrMatch3.1.5-r5python

AND

openexr openexrMatch3.1.10-r0python

AND

openexr openexrMatch3.1.11-r0python

AND

openexr openexrMatch3.1.4-r0python

AND

openexr openexrMatch2.4.1-r2python

AND

openexr openexrMatch2.5.5-r3python

AND

openexr openexrMatch3.4.4-r0python

AND

openexr openexrMatch2.4.1-r1python

AND

openexr openexrMatch3.1.5-r6python

AND

openexr openexrMatch2.5.5-r0python

AND

openexr openexrMatch3.1.7-r0python

AND

openexr openexrMatch3.4.2-r0python

AND

openexr openexrMatch3.1.13-r1python

AND

openexr openexrMatch3.1.7-r2python

AND

openexr openexrMatch2.5.5-r2python

AND

openexr openexrMatch3.1.12-r0python

AND

openexr openexrMatch3.1.3-r0python

AND

openexr openexrMatch3.1.7-r1python

AND

openexr openexrMatch3.1.8-r0python

AND

openexr openexrMatch3.1.5-r0python

AND

openexr openexrMatch3.1.5-r4python

AND

openexr openexrMatch3.1.5-r1python

AND

openexr openexrMatch3.1.5-r3python

AND

openexr openexrMatch3.3.2-r0python

AND

openexr openexrMatch3.1.2-r0python

AND

openexr openexrMatch3.1.5-r2python

AND

openexr openexrMatch3.1.13-r2python

AND

openexr openexrMatch2.5.5-r1python

AND

openexr openexrMatch3.1.13-r0python

AND

openexr openexrMatch3.1.6-r1python

AND

openexr openexrMatch3.1.9-r0python

AND

openexr openexrMatch3.1.1-r0python

AND

alpinelinux alpine_linuxMatchedge

OR

openexr openexrRange3.2.0–3.2.6python

OR

openexr openexrRange3.3.0–3.3.8python

OR

openexr openexrRange3.4.0–3.4.7python

OR

openexr openexrMatch3.4.0python

OR

openexr openexrMatch3.4.1python

OR

openexr openexrMatch3.4.2python

OR

openexr openexrMatch3.4.3python

OR

openexr openexrMatch3.4.4python

OR

openexr openexrMatch3.4.5python

OR

openexr openexrMatch3.4.6python

OR

openexr openexrMatch3.3.0python

OR

openexr openexrMatch3.3.1python

OR

openexr openexrMatch3.3.2python

OR

openexr openexrMatch3.3.3python

OR

openexr openexrMatch3.3.4python

OR

openexr openexrMatch3.3.5python

OR

openexr openexrMatch3.3.6python

OR

openexr openexrMatch3.3.7python

OR

openexr openexrMatch3.2.3python

OR

openexr openexrMatch3.2.4python

OR

openexr openexrMatch3.2.5python

Source	Link
github	www.github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-vc68-257w-m432
github	www.github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.8
github	www.github.com/AcademySoftwareFoundation/openexr/commit/5f6d0aaa9e43802917af7db90f181e88e083d3b8
github	www.github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-vc68-257w-m432

09 May 2026 05:40Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

CVSS 48.7

EPSS0.0002

SSVC

OpenEXR information disclosure heap memory image decoding malicious file