openexr Vulnerability Advisory Catalog

Total 78 security vulnerabilities recorded for openexr software and firmware.

← Back to All Vendors
Component: openexr

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In ve...

๐Ÿ“… 2025-08-01
CVSS 5.5 Dossier →
Component: openexr

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In ve...

๐Ÿ“… 2025-07-31
CVSS 6.2 Dossier →
CVE-2025-48072 CRITICAL
Component: openexr

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Versi...

๐Ÿ“… 2025-07-31
CVSS 9.1 Dossier →
Component: openexr

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In ve...

๐Ÿ“… 2025-07-31
CVSS 7.8 Dossier →
Component: openexr

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function...

๐Ÿ“… 2024-04-08
CVSS 3.3 Dossier →
CVE-2023-5841 CRITICAL
Component: openexr

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEXย imag...

๐Ÿ“… 2024-02-01
CVSS 9.1 Dossier →
Component: openexr

A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger...

๐Ÿ“… 2022-08-23
CVSS 7.5 Dossier →
Component: openexr

A flaw was found in OpenEXR's B44Compressor. This flaw allows an attacker who can submit a crafted file to be processed by OpenEXR, to exhaust all mem...

๐Ÿ“… 2022-08-23
CVSS 7.5 Dossier →
CVE-2021-3941 MEDIUM
Component: openexr

In ImfChromaticities.cpp routine RGBtoXYZ(), there are some division operations such as `float Z = (1 - chroma.white.x - chroma.white.y) * Y / chroma....

๐Ÿ“… 2022-03-25
CVSS 6.5 Dossier →
CVE-2021-3933 MEDIUM
Component: openexr

An integer overflow could occur when OpenEXR processes a crafted file on systems where size_t < 64 bits. This could cause an invalid bytesPerLine and ...

๐Ÿ“… 2022-03-25
CVSS 5.5 Dossier →
Component: openexr

A flaw was found in OpenEXR's Multipart input file functionality. A crafted multi-part input file with no actual parts can trigger a NULL pointer dere...

๐Ÿ“… 2022-03-16
CVSS 7.5 Dossier →
Component: openexr

A flaw found in function dataWindowForTile() of IlmImf/ImfTiledMisc.cpp. An attacker who is able to submit a crafted file to be processed by OpenEXR c...

๐Ÿ“… 2022-03-04
CVSS 6.1 Dossier →
Component: openexr

A flaw was found in OpenEXR's TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image to be processe...

๐Ÿ“… 2022-03-04
CVSS 5.5 Dossier →
Component: openexr

A flaw was found in OpenEXR's hufUncompress functionality in OpenEXR/IlmImf/ImfHuf.cpp. This flaw allows an attacker who can submit a crafted file tha...

๐Ÿ“… 2022-03-04
CVSS 5.5 Dossier →
Component: openexr

OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider:...

๐Ÿ“… 2022-01-01
CVSS 5.5 Dossier →
CVE-2021-3605 MEDIUM
Component: openexr

There's a flaw in OpenEXR's rleUncompress functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an application...

๐Ÿ“… 2021-08-25
CVSS 5.5 Dossier →
CVE-2021-3598 MEDIUM
Component: openexr

There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3.0.5. An attacker who is able to submit a crafted file to an ...

๐Ÿ“… 2021-07-06
CVSS 5.5 Dossier →
Component: openexr

An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an appli...

๐Ÿ“… 2021-06-08
CVSS 5.5 Dossier →
Component: openexr

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this f...

๐Ÿ“… 2021-06-08
CVSS 5.5 Dossier →
Component: openexr

An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this f...

๐Ÿ“… 2021-06-08
CVSS 5.5 Dossier →
Component: openexr

A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1. An attacker could use this flaw to execute a...

๐Ÿ“… 2021-06-08
CVSS 8.8 Dossier →
Component: openexr

A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression fu...

๐Ÿ“… 2021-04-01
CVSS 5.3 Dossier →
CVE-2021-3479 MEDIUM
Component: openexr

There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed...

๐Ÿ“… 2021-03-31
CVSS 5.5 Dossier →
CVE-2021-3478 MEDIUM
Component: openexr

There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit a crafted file to be processed...

๐Ÿ“… 2021-03-31
CVSS 5.5 Dossier →
Page 2 of 4 (78 Total Records)