OpenEXR is a widely used image storage format implementation for the motion picture industry. In affected versions of openexr, a critical integer overflow occurs in the internal_dwa_compressor.h file at line 1040 due to multiplication of chan->width and chan->bytes_per_element using int32 arithmetic without proper casting to size_t. This can lead to overflow or wraparound, potentially causing memory corruption or other undefined behavior. The vulnerability is similar to previously fixed issues (CVE-2026-34589/34588/34544) but was missed in this specific code location. Versions 3.2.8, 3.3.10, and 3.4.10 include the fix for this issue.

The integer overflow can result in incorrect memory allocation or buffer sizes, potentially leading to memory corruption or crashes when processing specially crafted EXR files. Given the high CVSS score (8.4) and the nature of the vulnerability, it poses a significant risk to applications using vulnerable openexr versions, especially in local attack scenarios with low complexity. However, no known exploits have been reported in the wild so far.

Users should upgrade to openexr versions 3.2.8, 3.3.10, or 3.4.10 or later, which contain the fix for this integer overflow vulnerability. Since the vendor advisory is not explicitly provided, patch status is inferred from version fixes mentioned in the description. No other mitigation or temporary workaround is indicated. Patch status is not yet confirmed by an official vendor advisory; users should verify with the AcademySoftwareFoundation for the latest remediation guidance.