OpenEXR, a library implementing the EXR image file format, contains an integer overflow vulnerability (CWE-190) in its DWA lossy decoder component. Specifically, from versions 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, the decoder uses signed 32-bit arithmetic to calculate temporary per-component block pointers. For sufficiently large image widths, this calculation overflows, causing the pointer to wrap around and subsequent decoder operations to access memory outside the allocated rowBlock buffer. This can lead to memory corruption (CWE-787). The vulnerability is addressed in versions 3.2.7, 3.3.9, and 3.4.9. The CVSS 4.0 base score is 8.4, indicating high severity. No known exploits in the wild have been reported. The Red Hat advisory linked provides vendor confirmation but does not explicitly state patch availability or remediation level.

Successful exploitation of this integer overflow can cause the decoder to operate on memory outside its allocated buffer, potentially leading to memory corruption. This can result in application crashes or other undefined behavior. The vulnerability is rated high severity with a CVSS 4.0 score of 8.4, reflecting significant impact on confidentiality, integrity, and availability when exploited locally with user interaction.

The vulnerability is fixed in openexr versions 3.2.7, 3.3.9, and 3.4.9. Users should upgrade to these or later versions to remediate the issue. The Red Hat advisory confirms the vulnerability but does not explicitly state patch availability; therefore, check the vendor advisory for the latest remediation guidance. No other mitigations are specified by the vendor.