What’s Vulnerable › Products
AcademySoftwareFoundation openexr vulnerabilities
100 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 50 published in the last 12 months.
Check whether your AcademySoftwareFoundation openexr version is affected
Latest AcademySoftwareFoundation openexr vulnerabilities
- CVE-2026-68515 — OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union (CVSS 7.1)
- CVE-2026-68514 — OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep images (CVSS 5.5)
- CVE-2026-68513 — OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision (CVSS 7.1)
- CVE-2026-59981 — OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow (CVSS 7.1)
- CVE-2026-65979 — OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN) (CVSS 6.7)
- CVE-2026-62986 — OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure (CVSS 4.3)
- CVE-2026-61555 — OpenEXR: Empty multiView viewFromChannelName file crash (CVSS 5.5)
- CVE-2026-59985 — OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32 (CVSS 5.5)
- CVE-2026-59984 — OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32 (CVSS 5.5)
- CVE-2026-59983 — OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32 (CVSS 5.5)
- CVE-2026-59982 — OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms (CVSS 7.1)
- CVE-2026-59189 — OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin (CVSS 7.1)
- CVE-2026-59187 — OpenEXR: exrmetrics deep pixelmode heap buffer overflow (CVSS 7.1)
- CVE-2026-59186 — OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds (CVSS 7.1)
- CVE-2026-59184 — OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write (CVSS 7.1)
- CVE-2026-59183 — OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decoding (CVSS 5.5)
- CVE-2026-55373 — OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts (CVSS 6.2)
- CVE-2026-55371 — OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_length (CVSS 6.9)
- CVE-2026-55059 — OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerability (CVSS 6.1)
- CVE-2026-54920 — OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize (CVSS 0.0)
- CVE-2026-53532 — OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS) (CVSS 7.1)
- CVE-2026-68516 — OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow (CVSS 6.5)
- CVE-2026-45696 — OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS) (CVSS 6.5)
- CVE-2026-44663 — OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow (CVSS 7.1)
- CVE-2026-42217 — OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`) (CVSS 9.8)