PyOpenEXR v3.4.14 Security Advisory: 15 CVEs Fixed for Heap Overflow and OOB Vulnerabilities

Vulnerability Overview Version: v3.4.14 Release Date: 3 weeks ago Number of CVEs: 15 Primary Issues: Memory corruption (heap buffer overflow and out-of-bounds read/write) Potential Impact: Denial of Service (DoS) or Arbitrary Code Execution Affected Scope Affected Components: - PyOpenEXR C++ library - Command-line tools ( , , ) - PyOpenEXR Python bindings Attack Vector: Maliciously crafted files Severity: From Medium (requires specific configuration) to Critical (heap overflow reachable) Remediation Patch Version: v3.4.14 Fix Details: - Resolved 15 CVEs - Implemented additional hardcoded changes Vulnerability Classification 1. PyOpenEXR RGB Channel Merging Bug - CVEs: CVE-2026-68514, CVE-2026-68513, CVE-2026-62986, CVE-2026-61703 - Issue: Heap buffer overflow caused by channel name conflicts or mismatches 2. Integer Overflow Heap Overflow in 32-bit (ILP32) Builds - CVEs: CVE-2026-59985, CVE-2026-59984, CVE-2026-59983, CVE-2026-59982, CVE-2026-59981, CVE-2026-59187, CVE-2026-59186 - Issue: Heap overflow resulting from buffer size calculation overflow 3. Out-of-Bounds Access for Non-Default Data Windows - CVEs: CVE-2026-59981, CVE-2026-59187, CVE-2026-59186, CVE-2026-59183 - Issue: Out-of-bounds access triggered by non-default data windows 4. Crash (DoS) Due to Corrupted Metadata - CVEs: CVE-2026-61555, CVE-2026-59183 - Issue: Crash caused by corrupted metadata Other Fixes Refusal to accept truncated or shortened streams Refusal of over-allocation requests Addition of NULL pointer checks Fix for truncation/termination bug Suppression of double-free warning in CVE List CVE-2026-68514: PyOpenEXR Depth Prefix Literal RGB Key Collision Heap Buffer Overflow CVE-2026-68513: PyOpenEXR Prefix Literal RGB Key Collision Heap Buffer Overflow CVE-2026-62986: PyOpenEXR Depth Prefix RGB Status Line Disclosure CVE-2026-61703: PyOpenEXR Depth Mixed RGB Heap Buffer Overflow CVE-2026-61555: Crash on Empty View from File CVE-2026-59985: ILP32 OpenEXRCORE RLE Decoding Heap OOB Read DoS CVE-2026-59984: ILP32 B44 Input File Decoding Heap Buffer Overflow CVE-2026-59983: ILP32 DeepTiledInputFile Sample Count Table Decoding Heap OOB Read CVE-2026-59982: ILP32 DWAA Input File Packing Heap OOB Read CVE-2026-59981: OpenEXRUtil SampleCountChannel Line Non-Zero Data Window Heap OOB Read CVE-2026-59187: OpenEXRUtil DeepImageChannel Line Non-Zero Data Window Heap OOB Read CVE-2026-59187: OpenEXRUtil exrmetrics Depth Pixel Heap Buffer Overflow CVE-2026-59186: OpenEXRUtil ILP32 TiledRgbPlainFile Large Array 2D Heap OOB Write CVE-2026-59184: OpenEXRUtil FlatImageChannel Line Non-Zero Data Window Heap OOB Write CVE-2026-59183: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Depth Block Decoding POC Code No POC code provided

Goal Reached Thanks to every supporter — we hit 100%!

PyOpenEXR v3.4.14 Security Advisory: 15 CVEs Fixed for Heap Overflow and OOB Vulnerabilities

More from this source