Log in Start free

Vulnerability · Published Aug 25, 2026 · Assigned by GitHub_M

CVE-2026-59183OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding

Medium 5.5

In plain English

A medium-severity integer overflow in openexr from AcademySoftwareFoundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 93.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32_t multiplication in OpenEXRCore's unpack_sample_table() can overflow while decoding a crafted deep tiled EXR file, producing an invalid pointer that leads to a read from an unmapped memory address and a crash. Because the overflow occurs in the standard decoding path (exr_decoding_run), any application that decodes deep tiled EXR files is affected. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.24openexr3.4.15-r0ALPINE-CVE-2026-59183
Debian:12openexrno fix listedDEBIAN-CVE-2026-59183
Debian:13openexrno fix listedDEBIAN-CVE-2026-59183
Debian:14openexr3.4.14-0.1DEBIAN-CVE-2026-59183
Ubuntu:26.10openexrno fix listedUBUNTU-CVE-2026-59183

Affected products (as reported)

VendorProductVersions
AcademySoftwareFoundation openexr >= 3.1.0, < 3.2.11>= 3.3.0, < 3.3.13>= 3.4.0, < 3.4.14

Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References