Multiple vulnerabilities in OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow crafted EXR files to cause memory corruption issues including integer overflow, out-of-bounds reads and writes, use-after-free, and crashes. These issues affect the decoding and processing of deep tiled EXR files and arise from improper handling of dataWindow origins and buffer size calculations. The vulnerabilities are fixed in versions 3.2.11, 3.3.13, and 3.4.14.