Skip to content
Threat Feed
Subscribe

Vendor

OpenEXR

1 brief RSS
high advisory

OpenEXR PIZ Decoder Integer Overflow Leads to OOB Read/Write

A crafted OpenEXR file can trigger out-of-bounds memory access during PIZ decompression due to a signed 32-bit overflow in the `internal_exr_undo_piz()` function, leading to out-of-bounds reads and writes and potentially causing process crashes or memory corruption; affects OpenEXR versions 3.1.0 to 3.2.6, 3.3.0 to 3.3.8, and 3.4.0 to 3.4.8.

OpenEXR memory-corruption out-of-bounds cve-2026-34588
3r 4t 1i