Priority HIGH 80
Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-bas…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01248 · Published 2024-02-01 · Partial fix · 3.2.2, 3.1.12 CWE-122
Priority HIGH 77
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00465 · Published 2026-05-07 · Partial fix · 3.2.9, 3.3.11 +1 CWE-125
Priority HIGH 77
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00501 · Published 2026-04-01 · Partial fix · 3.4.8 CWE-908
Priority HIGH 72
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00635 · Published 2026-04-01 · Partial fix · 3.4.7 CWE-122
Priority HIGH 72
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00254 · Published 2026-04-01 · Partial fix · 3.4.8 CWE-190
Priority HIGH 72
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0HIGH 8.4· Local · No auth · User interaction · EPSS 0.00392 · Published 2025-07-31 · Fixed in 3.3.3 CWE-122
Priority HIGH 69
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry.
CVSS 4.0HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00418 · Published 2026-06-18 · Partial fix · 3.4.11 CWE-122
Priority MEDIUM 64
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00294 · Published 2026-04-06 · Partial fix · 3.2.7, 3.3.9 +1 CWE-704
Priority MEDIUM 63
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00302 · Published 2026-04-21 · Partial fix · 3.4.10 CWE-190
Priority MEDIUM 63
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.0058 · Published 2025-07-31 · Fixed in 3.3.3 CWE-125
Priority MEDIUM 62
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00272 · Published 2026-04-06 · Partial fix · 3.4.9 CWE-190
Priority MEDIUM 62
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00597 · Published 2026-02-24 · Fixed in 3.3.7, 3.4.5 CWE-195
Priority MEDIUM 61
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00393 · Published 2026-05-07 · Partial fix · 3.2.9, 3.3.11 +1 CWE-190
Priority MEDIUM 60
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 3.1MEDIUM 5.9· Network · No auth · User interaction · EPSS 0.00265 · Published 2026-04-06 · Partial fix · 3.2.7, 3.3.9 +1 CWE-190
Priority MEDIUM 60
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0MEDIUM 5.5· Local · No auth · No interaction · EPSS 0.0026 · Published 2025-11-10 · Fixed in 3.2.5, 3.3.6 +1 CWE-120
Priority MEDIUM 58
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0MEDIUM 5.5· Local · No auth · No interaction · EPSS 0.00322 · Published 2025-11-10 · Fixed in 3.2.5, 3.3.6 +1 CWE-416
Priority MEDIUM 54
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0MEDIUM 4.6· Local · No auth · User interaction · EPSS 0.00296 · Published 2025-08-01 · Fixed in 3.3.3 CWE-770
Priority MEDIUM 54
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0MEDIUM 4.6· Local · No auth · User interaction · EPSS 0.00228 · Published 2025-07-31 · Fixed in 3.3.3 CWE-476
Priority MEDIUM 49
An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2024-04-08 · No fix listed CWE-190
Priority MEDIUM 44
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0LOW 2.0· Local · No auth · No interaction · EPSS 0.00409 · Published 2025-11-10 · Partial fix · 3.3.6, 3.4.3 CWE-457
Priority MEDIUM 44
In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary code.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03295 · Published 2017-05-21 · Will not fix
Priority MEDIUM 44
In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or execute arbitrary code.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03143 · Published 2017-05-21 · Will not fix
Priority MEDIUM 44
In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or execute arbitrary code.
CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.03192 · Published 2017-05-21 · Partial fix · 2.2.1 CWE-787
Priority MEDIUM 42
A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02291 · Published 2021-06-08 · Will not fix CWE-787
Priority MEDIUM 42
Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors that trigger heap-based…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06437 · Published 2009-07-31 · No fix listed CWE-189
Load more