https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T05:03:26.143417+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-15045 bdu:2026-15045 2026-10-03T05:03:26.236892+00:00 bdu:2026-15045 https://cve.radiocsirt.org/vuln/bell-cve-2026-59983 BELL-CVE-2026-59983 2026-10-03T05:03:26.236942+00:00

Affected: Alpaquita:stream: openexr

 https://cve.radiocsirt.org/vuln/euvd-2026-358912 EUVD-2026-358912 2026-10-03T05:03:26.236970+00:00 EUVD-2026-358912 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59983 fkie_cve-2026-59983 2026-10-03T05:03:26.236982+00:00

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds read. The vulnerability is reached when a crafted uncompressed deep-tile EXR causes the sample-count table size calculation in OpenEXRCore decoding.c to wrap before unpack_sample_table() iterates over the full attacker-controlled tile dimensions, allowing denial of service. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11612-1 openSUSE-SU-2026:11612-1 — libIex-3_4-33-3.4.14-1.1 on GA media 2026-10-03T05:03:26.237009+00:00

libIex-3_4-33-3.4.14-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2026:23604-1 SUSE-SU-2026:23604-1 — Security update for openexr 2026-10-03T05:03:26.237038+00:00

Security update for openexr

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59983 UBUNTU-CVE-2026-59983 2026-10-03T05:03:26.237060+00:00

Affected: Ubuntu:Pro:16.04:LTS: openexr, Ubuntu:Pro:18.04:LTS: openexr, Ubuntu:Pro:20.04:LTS: openexr, Ubuntu:Pro:22.04:LTS: openexr, Ubuntu:Pro:24.04:LTS: openexr, Ubuntu:Pro:26.04:LTS: openexr

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds read. The vulnerability is reached when a crafted uncompressed deep-tile EXR causes the sample-count table size calculation in OpenEXRCore decoding.c to wrap before unpack_sample_table() iterates over the full attacker-controlled tile dimensions, allowing denial of service. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.