https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 14:12:07 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-59186 <p><strong>Affected:</strong> Alpaquita:stream: openexr</p> <p><strong>Affected:</strong> Alpaquita:stream: openexr</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-59186 https://cve.radiocsirt.org/vuln/euvd-2026-358906 EUVD-2026-358906 https://cve.radiocsirt.org/vuln/euvd-2026-358906 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59186 <p>OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read through the public TiledRgbaInputFile RGBA API. The file uses a small 40x40 dataWindow but a 65537x65537 tile size. On ILP32, the Array2D&lt;Rgba&gt; tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.</p> <p>OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read through the public TiledRgbaInputFile RGBA API. The file uses a small 40x40 dataWindow but a 65537x65537 tile size. On ILP32, the Array2D&lt;Rgba&gt; tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-59186 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11612-1 <p>libIex-3_4-33-3.4.14-1.1 on GA media</p> <p>libIex-3_4-33-3.4.14-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11612-1 https://cve.radiocsirt.org/vuln/suse-su-2026:23604-1 <p>Security update for openexr</p> <p>Security update for openexr</p> https://cve.radiocsirt.org/vuln/suse-su-2026:23604-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59186 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: openexr, Ubuntu:Pro:18.04:LTS: openexr, Ubuntu:Pro:20.04:LTS: openexr, Ubuntu:Pro:22.04:LTS: openexr, Ubuntu:Pro:24.04:LTS: openexr, Ubuntu:Pro:26.04:LTS: openexr</p> <p>OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read through the public TiledRgbaInputFile RGBA API. The file uses a small 40x40 dataWindow but a 65537x65537 tile size. On ILP32, the Array2D&lt;Rgba&gt; tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: openexr, Ubuntu:Pro:18.04:LTS: openexr, Ubuntu:Pro:20.04:LTS: openexr, Ubuntu:Pro:22.04:LTS: openexr, Ubuntu:Pro:24.04:LTS: openexr, Ubuntu:Pro:26.04:LTS: openexr</p> <p>OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, a crafted tiled EXR can trigger a heap out-of-bounds write on 32-bit/ILP32 builds when read through the public TiledRgbaInputFile RGBA API. The file uses a small 40x40 dataWindow but a 65537x65537 tile size. On ILP32, the Array2D&lt;Rgba&gt; tile-conversion buffer size calculation overflows, allocates a much smaller heap buffer, and tile decode writes past that allocation. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-59186