Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

OpenEXR — Vulnerabilities & Security Advisories 72

All 72 CVE vulnerabilities found in OpenEXR, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses for OpenEXR, an open-source image file format library maintained by the OpenImageIO project. It collects reported vulnerabilities such as memory safety flaws, input validation errors, and integer overflows, covering advisories published from 2015 through the present. Readers can use this collection to track the vendor’s security advisory history, understand the prevalence of specific weakness classes, and review the product’s overall vulnerability landscape. The data supports risk assessment by highlighting recurring issue types and temporal trends in reported defects.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-34589 OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write CWE-190 9.1 - 2026-04-06
CVE-2026-34588 OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write CWE-125 8.6 High 2026-04-06
CVE-2026-34380 OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression CWE-190 5.9 Medium 2026-04-06
CVE-2026-34379 OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression) CWE-704 7.1 High 2026-04-06
CVE-2026-34378 OpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.x CWE-190 6.5 Medium 2026-04-06
CVE-2026-34543 OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl) CWE-908 5.5AI Medium AI 2026-04-01
CVE-2026-34544 OpenEXR: integer overflow to OOB write in uncompress_b44_impl() CWE-190 8.8AI High AI 2026-04-01
CVE-2026-34545 OpenEXR: integer overflow lead to OOB in HTJ2K decoder CWE-122 9.6AI Critical AI 2026-04-01
CVE-2026-27622 OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write CWE-787 8.4 High 2026-03-03
CVE-2026-26981 OpenEXR has heap-buffer-overflow via signed integer underflow in ImfContextInit.cpp CWE-195 6.5 Medium 2026-02-24
CVE-2025-12840 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AI High AI 2025-12-23
CVE-2025-12839 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AI High AI 2025-12-23
CVE-2025-12495 Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability CWE-122 7.8AI High AI 2025-12-23
CVE-2025-64183 OpenEXR has use after free in PyObject_StealAttrString CWE-416 9.1 - 2025-11-10
CVE-2025-64182 OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel() CWE-120 7.8 - 2025-11-10
CVE-2025-64181 OpenEXR Makes Use of Uninitialized Memory CWE-457 9.1 - 2025-11-10
CVE-2025-48074 OpenEXR's Unbounded File Header Values can Lead to Out-Of-Memory Errors CWE-770 6.5 - 2025-08-01
CVE-2025-48073 OpenEXR ScanLineProcess::run_fill NULL Pointer Write In "reduceMemory" Mode CWE-476 7.5AI High AI 2025-07-31
CVE-2025-48072 OpenEXR's Inaccurate Pointer Arithmetic can Cause an Out of Bounds Heap CWE-125 7.8AI High AI 2025-07-31
CVE-2025-48071 OpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline Parsing CWE-122 7.8AI High AI 2025-07-31
CVE-2023-5841 OpenEXR Heap Overflow in Scanline Deep Data Parsing CWE-122 8.8 - 2024-02-01
CVE-2021-20298 ILM OpenEXR 缓冲区错误漏洞 CWE-400 7.5 - 2022-08-23
CVE-2021-20304 ILM OpenEXR 输入验证错误漏洞 CWE-190 6.5 - 2022-08-23
CVE-2021-3941 ILM OpenEXR 数字错误漏洞 CWE-369 6.2 - 2022-03-25
CVE-2021-3933 ILM OpenEXR 输入验证错误漏洞 CWE-190 5.5 - 2022-03-25
CVE-2021-20299 ILM OpenEXR 代码问题漏洞 CWE-476 7.5 - 2022-03-16
CVE-2021-20300 ILM OpenEXR 输入验证错误漏洞 CWE-190 5.5 - 2022-03-04
CVE-2021-20302 ILM OpenEXR 安全漏洞 CWE-20 6.2 - 2022-03-04
CVE-2021-20303 ILM OpenEXR 输入验证错误漏洞 CWE-190 6.1 - 2022-03-04
CVE-2021-3605 Industrial Light And Magic(lim) OpenEXR 缓冲区错误漏洞 CWE-119 5.5 - 2021-08-25

All 72 known CVE vulnerabilities affecting OpenEXR with full Chinese analysis, references, and POCs where available.