Openexr: Heap-buffer-overflow
Affects openexrSource GCVE Database
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in f448690ec24ca20f1664541b27daf2f120973f28
Data as of 27 Oct 2026, 00:51 UTC
What to do
Upgrade openexr to f448690ec24ca20f1664541b27daf2f120973f28.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzopenexrpkg:generic/openexrOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch addressing this vulnerability is available and should be applied. Users of affected OpenEXR versions should update to the fixed version identified by commit f448690ec24ca20f1664541b27daf2f120973f28. No additional mitigation steps are indicated by the vendor advisory.
Description
A heap-buffer-overflow vulnerability exists in the DwaCompressor_uncompress function of OpenEXR, as reported by OSS-Fuzz. This flaw can lead to out-of-bounds memory writes during decompression operations. A patch has been made available to address this issue.