Skip to main content
VulnerabilityPublished

Openexr: Heap-buffer-overflow

Affects openexrSource GCVE Database

0
Severity
High

Rated High by Threat Radar's AI analysis

Patch
Available – fixed in f448690ec24ca20f1664541b27daf2f120973f28

Data as of 27 Oct 2026, 00:08 UTC

What to do

Upgrade openexr to f448690ec24ca20f1664541b27daf2f120973f28.

Affected software

ProductAffectedFixed in
OSS-Fuzzopenexrpkg:generic/openexrOther threatsAffected
  • v3.3.4 – v3.4.11-rc3
  • >=39b9d241cdcd4c95b7916992b8872d2620f9ac7a <f448690ec24ca20f1664541b27daf2f120973f28
  • >=d948c6729c30cf15eaade9903ca0186d56a22d41
57 affected builds		Fixed in
  • f448690ec24ca20f1664541b27daf2f120973f28

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch addressing this vulnerability is available and should be applied. Users should update to the fixed version identified by commit f448690ec24ca20f1664541b27daf2f120973f28 to remediate the issue.

Description

A heap-buffer-overflow vulnerability exists in the generic_unpack function of OpenEXR, as reported by OSS-Fuzz. This issue involves a read overflow during image decoding operations. A patch has been made available to address this flaw.

References

Community reviews

Loading reviews…