OpenEXR, a widely used HDR image file format implementation, has multiple vulnerabilities affecting versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 on ILP32 builds. These include an out-of-bounds read triggered by crafted uncompressed deep-tile EXR files causing denial of service, and a heap out-of-bounds write in the exrmultiview utility when combining two crafted scanline EXR files with misaligned union dataWindows. Both issues are fixed in versions 3.2.11, 3.3.13, and 3.4.14.