Search CVE reports


Toggle filters

1 – 10 of 59 results


CVE-2025-64183

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-64182

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, a...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-64181

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-48074

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-48073

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-48072

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2025-48071

Medium priority
Needs evaluation

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.2 through 3.3.0, there is a heap-based buffer overflow during a write...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2024-31047

Medium priority
Needs evaluation

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp.

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Needs evaluation Needs evaluation Needs evaluation
Show less packages

CVE-2023-5841

Medium priority
Needs evaluation

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Needs evaluation Not affected Not affected Not affected
Show less packages

CVE-2021-20304

Negligible priority
Needs evaluation

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. The highest threat from this vulnerability is...

1 affected package

openexr

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Needs evaluation Needs evaluation
Show less packages