AcademySoftwareFoundation openexr

• CVE-2026-59981 High 7.1 OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow 0.3%
• CVE-2026-68514 Medium 5.5 OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images 0.2%
• CVE-2026-68515 High 7.1 OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union 0.2%
• CVE-2026-68513 High 7.1 OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision 0.2%
• CVE-2026-65979 Medium 6.7 OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN) 0.2%
• CVE-2026-62986 Medium 4.3 OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure 0.4%
• CVE-2026-61555 Medium 5.5 OpenEXR: Empty multiView viewFromChannelName file crash 0.2%
• CVE-2026-59985 Medium 5.5 OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32 0.2%
• CVE-2026-59984 Medium 5.5 OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32 0.2%
• CVE-2026-59983 Medium 5.5 OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32 0.2%
• CVE-2026-59982 High 7.1 OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms 0.3%
• CVE-2026-59189 High 7.1 OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin 0.3%
• CVE-2026-59187 High 7.1 OpenEXR: exrmetrics deep pixelmode heap buffer overflow 0.4%
• CVE-2026-59186 High 7.1 OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds 0.3%
• CVE-2026-59184 High 7.1 OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write 0.2%
• CVE-2026-59183 Medium 5.5 OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding 0.2%
• CVE-2026-55373 Medium 6.2 OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts 0.2%
• CVE-2026-55371 Medium 6.9 OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length 0.2%
• CVE-2026-55059 Medium 6.1 OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability 0.1%
• CVE-2026-54920 None 0.0 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize 0.4%
• CVE-2026-53532 High 7.1 OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS) 0.4%
• CVE-2026-68516 Medium 6.5 OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow 0.5%
• CVE-2026-45696 High 7.1 OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS) 0.4%
• CVE-2026-44663 Medium 6.1 OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow 0.2%
• CVE-2026-42217 Medium 6.3 OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`) 0.4%
• CVE-2026-42216 High 8.1 OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion 0.5%
• CVE-2026-41142 High 8.8 OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API 0.4%
• CVE-2026-40250 High 8.4 OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589) 0.4%
• CVE-2026-40244 High 8.2 OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589) 0.4%
• CVE-2026-39886 Medium 5.3 OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl() 0.3%
• CVE-2026-34589 High 8.8 OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write 0.4%
• CVE-2026-34588 High 8.8 OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write 0.5%
• CVE-2026-34380 Medium 5.9 OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression 0.3%
• CVE-2026-34379 High 7.1 OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression) 0.3%
• CVE-2026-34378 Medium 6.5 OpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.x 0.3%
• CVE-2026-34543 High 8.7 OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl) 0.5%
• CVE-2026-34544 High 8.4 OpenEXR: integer overflow to OOB write in uncompress_b44_impl() 0.3%
• CVE-2026-34545 High 8.8 OpenEXR: integer overflow lead to OOB in HTJ2K decoder 0.6%
• CVE-2026-27622 High 7.4 OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write 0.2%
• CVE-2026-26981 Medium 6.5 OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp 0.6%
• CVE-2025-64183 Medium 5.5 OpenEXR has use after free in PyObject_StealAttrString 0.3%
• CVE-2025-64182 Medium 5.5 OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel() 0.3%
• CVE-2025-64181 Low 2.0 OpenEXR Makes Use of Uninitialized Memory 0.4%
• CVE-2025-48074 Medium 4.6 OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors 0.3%
• CVE-2025-48073 Medium 4.6 OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode 0.2%
• CVE-2025-48072 Medium 6.8 OpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds Heap 0.6%
• CVE-2025-48071 High 8.4 OpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline Parsing 0.4%