Skip to content
Threat Feed

Tag

Dwaa

1 brief RSS
high advisory

OpenEXR DWA Lossy Decoder Heap Out-of-Bounds Write Vulnerability

A heap out-of-bounds write vulnerability exists in OpenEXR's DWA lossy decoder due to integer overflow during block pointer calculation, triggered via crafted DWAA files, leading to crashes during DCT execution.

openexr heap-overflow dwaa cve-2026-34589
2r 1t 1c 1i