Openexr: UNKNOWN READ
Affects openexrSource GCVE Database
Rated Medium by Threat Radar's AI analysis
- Patch
- Available – fixed in c74a1e42530f4b783787e99d8c2b8efdc342af34
Data as of 13 Nov 2026, 19:13 UTC
What to do
Upgrade openexr to c74a1e42530f4b783787e99d8c2b8efdc342af34.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzopenexrpkg:generic/openexrOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and has been committed to fix this vulnerability. Users of the affected OpenEXR versions should update to the fixed version corresponding to commit c74a1e42530f4b783787e99d8c2b8efdc342af34 to remediate the issue.
Description
A memory safety issue (UNKNOWN READ) was identified in the destructor of the ojph::local::param_cod class in OpenEXR. This vulnerability was reported by OSS-Fuzz and affects multiple 3.4.x versions of OpenEXR. A fix has been committed to address this issue.