Threats tagged 'osv-2026-1517'

A vulnerability in OpenEXR versions 3.5.0 through 3.5.3 and their release candidates causes an UNKNOWN READ crash in the destructor of ojph::local::param_nlt. This issue was identified by OSS-Fuzz and results in a crash during object destruction.