Search CVE reports


Toggle filters

11 – 20 of 78 results


CVE-2026-34378

Medium priority
Not affected

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.4.0 to before 3.4.9, a missing bounds check on the dataWindow attribute in EXR...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2026-34545

Medium priority
Not affected

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.7, an attacker providing a crafted .exr file...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2026-34544

Medium priority
Not affected

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2026-34543

Medium priority
Not affected

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2026-27622

Medium priority

Some fixes available 6 of 7

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Fixed Fixed Fixed Fixed Fixed
Show less packages

CVE-2026-26981

Medium priority
Not affected

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.6 and 3.4.0 through 3.4.4, a heap-buffer-overflow (OOB...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-12840

Medium priority
Vulnerable

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Vulnerable Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-12839

Medium priority
Vulnerable

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Vulnerable Vulnerable Not affected Not affected Not affected
Show less packages

CVE-2025-12495

Medium priority
Vulnerable

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Vulnerable Vulnerable Not affected Not affected Not affected
Show less packages

CVE-2025-64183

Medium priority
Ignored

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected
Show less packages