Skip to content
Threat Feed
Subscribe

Tag

OpenEXR

3 briefs RSS
high advisory

Red Hat Enterprise Linux (openEXR) Vulnerability Allows Code Execution

A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux (openEXR) to execute arbitrary program code.

Red Hat Enterprise Linux code-execution rhel openEXR linux
2r 1t
high advisory

OpenEXR DWA Lossy Decoder Heap Out-of-Bounds Write Vulnerability

A heap out-of-bounds write vulnerability exists in OpenEXR's DWA lossy decoder due to integer overflow during block pointer calculation, triggered via crafted DWAA files, leading to crashes during DCT execution.

openexr heap-overflow dwaa cve-2026-34589
2r 1t 1c 1i
high advisory

OpenEXR Heap Information Disclosure in PXR24 Decompression (CVE-2026-34543)

OpenEXR is vulnerable to a heap information disclosure in PXR24 decompression, where the undo_pxr24_impl function ignores the actual decompressed size, potentially leading to the exposure of uninitialized heap memory when processing crafted EXR files.

openexr heap-disclosure cve-2026-34543
2r 2t 1c 2i