Количество 12
Количество 12
CVE-2026-59184
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.
CVE-2026-59184
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.
CVE-2026-59184
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.
CVE-2026-59184
OpenEXR is the reference implementation and specification for the EXR ...
RLSA-2026:86983
Important: openexr security update
RLSA-2026:84796
Important: openexr security update
RLSA-2026:82345
Important: OpenEXR security update
ELSA-2026-86983
ELSA-2026-86983: openexr security update (IMPORTANT)
ELSA-2026-84796
ELSA-2026-84796: openexr security update (IMPORTANT)
ELSA-2026-82345
ELSA-2026-82345: OpenEXR security update (IMPORTANT)
SUSE-SU-2026:4003-1
Security update for openexr
openSUSE-SU-2026:21737-1
Security update for openexr
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-59184 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-59184 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-59184 OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 allow a crafted EXR with a nonzero dataWindow.min to make TypedFlatImageChannel::row() return an invalid heap pointer, causing out-of-bounds or use-after-free writes. This occurs when an application writes rows through FlatHalfChannel::row(). Affected consumers are tools, converters, render pipeline components, or image-processing services that accept untrusted EXR files and use FlatHalfChannel::row() on loaded images. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14. | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
| CVE-2026-59184 OpenEXR is the reference implementation and specification for the EXR ... | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
 | RLSA-2026:86983 Important: openexr security update | 5 дней назад | ||
| RLSA-2026:84796 Important: openexr security update | 7 дней назад | ||
| RLSA-2026:82345 Important: OpenEXR security update | 13 дней назад | ||
| ELSA-2026-86983 ELSA-2026-86983: openexr security update (IMPORTANT) | 6 дней назад | ||
| ELSA-2026-84796 ELSA-2026-84796: openexr security update (IMPORTANT) | 8 дней назад | ||
| ELSA-2026-82345 ELSA-2026-82345: OpenEXR security update (IMPORTANT) | 14 дней назад | ||
 | SUSE-SU-2026:4003-1 Security update for openexr | около 2 месяцев назад | ||
| openSUSE-SU-2026:21737-1 Security update for openexr | около 2 месяцев назад |
Уязвимостей на страницу