https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:25:04.017430+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15058 bdu:2026-15058 2026-10-03T08:25:04.134905+00:00 bdu:2026-15058 https://cve.radiocsirt.org/vuln/bell-cve-2026-59982 BELL-CVE-2026-59982 2026-10-03T08:25:04.134948+00:00

Affected: Alpaquita:stream: openexr

 https://cve.radiocsirt.org/vuln/euvd-2026-358948 EUVD-2026-358948 2026-10-03T08:25:04.134977+00:00 EUVD-2026-358948 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59982 fkie_cve-2026-59982 2026-10-03T08:25:04.134989+00:00

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row() when a crafted deep EXR has a nonzero dataWindow origin. This vulnerability occurs because the API combines zero-based row access with an absolute-coordinate-adjusted base pointer, allowing a crash or limited information disclosure. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11612-1 openSUSE-SU-2026:11612-1 — libIex-3_4-33-3.4.14-1.1 on GA media 2026-10-03T08:25:04.135044+00:00

libIex-3_4-33-3.4.14-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:23604-1 SUSE-SU-2026:23604-1 — Security update for openexr 2026-10-03T08:25:04.135089+00:00

Security update for openexr

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59982 UBUNTU-CVE-2026-59982 2026-10-03T08:25:04.135112+00:00

Affected: Ubuntu:Pro:16.04:LTS: openexr, Ubuntu:Pro:18.04:LTS: openexr, Ubuntu:Pro:20.04:LTS: openexr, Ubuntu:Pro:22.04:LTS: openexr, Ubuntu:Pro:24.04:LTS: openexr, Ubuntu:Pro:26.04:LTS: openexr

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row() when a crafted deep EXR has a nonzero dataWindow origin. This vulnerability occurs because the API combines zero-based row access with an absolute-coordinate-adjusted base pointer, allowing a crash or limited information disclosure. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.