Most recent entries from all

certfr-2026-avi-0281 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq…

certfr-2026-avi-0281

cnvd-2025-24796

EUVD-2026-248884

fkie_cve-2025-48074

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file headers, which can lead to excessive memory allocation and performance degradation when processing malicious files. This is fixed in version 3.3.3.

GHSA-x22w-82jp-8rvf — OpenEXR Out-Of-Memory via Unbounded File Header Values

Affected: PyPI: OpenEXR

### Summary The OpenEXR file format defines many information about the final image inside of the file header, such as the size of data/display window.

The application trusts the value of `dataWindow` size provided in the header of the input file, and performs computations based on this value.

This may result in unintended behaviors, such as excessively large number of iterations and/or huge memory allocations.

### Details A concrete example of this issue is present in the function `readScanline()` in `ImfCheckFile.cpp` at line 235, that performs a for-loop using the `dataWindow min.y` and `max.y` coordinates that can be arbitrarily large.

```cpp in.setFrameBuffer (i);

int step = 1;

// // try reading scanlines. Continue reading scanlines // even if an exception is encountered // for (int y = dw.min.y; y <= dw.max.y; y += step) // <-- THIS LOOP IS EXCESSIVE BECAUSE OF DW.MAX { try { in.readPixels (y); } catch (...) { threw = true;

// // in reduceTime mode, fail immediately - the file is corrupt // if (reduceTime) { return threw; } } } ```

Another example occurs in the `EnvmapImage::resize` function that in turn calls `Array2D<T>::resizeEraseUnsafe` passing the `dataWindow` X and Y coordinates and perform a huge allocation.

On some system, the allocator will simply return `std::bad_alloc` and crash. On other systems such as macOS, the allocator will happily continue with a "small" pre-allocation a…

openSUSE-SU-2025:15415-1 — libIex-3_3-32-3.3.5-1.1 on GA media

libIex-3_3-32-3.3.5-1.1 on GA media

PYSEC-2026-1749 — OpenEXR Out-Of-Memory via Unbounded File Header Values

Affected: PyPI: openexr