Skip to content
OpenAdvisories
High RLSA-2026:84796 5 CVEs

Important: openexr security update

Published Oct 20, 2026 · Updated Oct 20, 2026

Ecosystem: Rocky Linux

Summary

OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR.

Security Fix(es):

* OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing (CVE-2026-34544)

* OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EXR files (CVE-2026-59184)

* OpenEXR: OpenEXR: Information disclosure and denial of service due to out-of-bounds read (CVE-2026-59189)

* OpenEXR: OpenEXR: Denial of Service or Information Disclosure via crafted EXR image file (CVE-2026-59982)

* OpenEXR: OpenEXR: Information disclosure and denial of service via out-of-bounds read (CVE-2026-59981)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 10 openexr 0:3.1.10-8.el10_2.5

Vulnerabilities 5

  • High 8.4
    CVE-2026-34544

    OpenEXR: integer overflow to OOB write in uncompress_b44_impl()

    OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Alpine Wolfi PyPI
  • High 7.1
    CVE-2026-59184

    OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

    OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make Ty…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Azure Linux Alpine
  • High 7.1
    CVE-2026-59189

    OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin

    OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In OpenEXRUtil versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.12, the documented TypedDeepImageChannel<T>::row() API can retur…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Azure Linux Alpine
  • High 7.1
    CVE-2026-59981

    OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow

    OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, the OpenEXRUtil library returns an out-of-bounds p…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Azure Linux Alpine
  • High 7.1
    CVE-2026-59982

    OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

    OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepIm…

    Academy Software Foundation openexr openexr openexr Debian Ubuntu Alpine

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2454127
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2523654
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2523671
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2523708
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2523752
  • advisory
    https://access.redhat.com/errata/RHSA-2026:84796