Search CVE reports


Toggle filters

1 – 10 of 72 results


CVE-2026-34589

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, the DWA lossy decoder...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34588

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internal_exr_undo_piz() advances the...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34380

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, a signed integer overflow exists in...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34379

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, a misaligned memory write vulnerability...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34378

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.4.0 to before 3.4.9, a missing bounds check on the dataWindow attribute in EXR...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34545

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.7, an attacker providing a crafted .exr file...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34544

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-34543

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-27622

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2026-26981

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.6 and 3.4.0 through 3.4.4, a heap-buffer-overflow (OOB...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages