Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110597— Tinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemory

Quick assessment

Affected
syoyo tinyexr
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Tinyexr 3.2.0 及之前版本在 函数中存在一个堆越界读取漏洞，该漏洞允许攻击者因残留的剩余大小值（stale remaining-size value）而读取超出缓冲区边界的内容。攻击者可以提供精心构造的多部分 EXR 文件，其后续部分的头信息可以绕过 函数的边界检查，从而导致应用程序崩溃或将相邻的堆内存泄露到属性值中。

CVSS 6.1 · Medium EPSS 0.25% · P16

Possible ATT&CK Techniques 1 AI

T1210 · Exploitation of Remote Services

Affected Version Matrix 1

VendorProduct Version RangeStatus
syoyo tinyexr ≤ 3.2.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-110597

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Tinyexr through 3.2.0 Heap Out-of-Bounds Read via ParseEXRMultipartHeaderFromMemory
Source: CVE Program / CVE List V5
Vulnerability Description
Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining-size value. Attackers can supply a crafted multi-part EXR file whose later part headers bypass ReadAttribute() bounds checks, crashing applications or leaking adjacent heap memory into attribute values.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
syoyo tinyexr 0 ~ 3.2.0 -

II. Public POCs for CVE-2026-110597

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110597

请登录查看更多情报信息。

Other References for CVE-2026-110597 (3)

Other References for CVE-2026-110597 (1)

IV. Related Vulnerabilities

Same vendor: syoyo
Same weakness: CWE-125

V. Comments for CVE-2026-110597

No comments yet

Leave a comment