A heap-buffer-overflow vulnerability exists in the DwaCompressor_uncompress function of OpenEXR. This issue was identified by OSS-Fuzz and involves a write overflow during decompression. Multiple versions of OpenEXR 3.3.x are affected. A fix has been implemented in later versions.