TI-2026-74091 CVE-2026-110597 · GHSA-jf92-wjh7-86g3
Heap out-of-bounds read in Tinyexr multipart EXR header parsing
Priority MEDIUM 64
Tinyexr through 3.2.0 contains a heap out-of-bounds read vulnerability in ParseEXRMultipartHeaderFromMemory() that allows attackers to read beyond buffers due to a stale remaining-size value.