Tag
Red Hat Enterprise Linux (openEXR) Vulnerability Allows Code Execution
2 rules 1 TTPA remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux (openEXR) to execute arbitrary program code.
OpenEXR DWA Lossy Decoder Heap Out-of-Bounds Write Vulnerability
2 rules 1 TTP 1 CVE 1 IOCA heap out-of-bounds write vulnerability exists in OpenEXR's DWA lossy decoder due to integer overflow during block pointer calculation, triggered via crafted DWAA files, leading to crashes during DCT execution.
OpenEXR Heap Information Disclosure in PXR24 Decompression (CVE-2026-34543)
2 rules 2 TTPs 1 CVE 2 IOCsOpenEXR is vulnerable to a heap information disclosure in PXR24 decompression, where the undo_pxr24_impl function ignores the actual decompressed size, potentially leading to the exposure of uninitialized heap memory when processing crafted EXR files.
OpenEXR PIZ Decoder Integer Overflow Leads to OOB Read/Write
3 rules 4 TTPs 1 IOCA crafted OpenEXR file can trigger out-of-bounds memory access during PIZ decompression due to a signed 32-bit overflow in the `internal_exr_undo_piz()` function, leading to out-of-bounds reads and writes and potentially causing process crashes or memory corruption; affects OpenEXR versions 3.1.0 to 3.2.6, 3.3.0 to 3.3.8, and 3.4.0 to 3.4.8.