Skip to content
Noroxi

openexr records

78 published records for vendor openexr.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
7
With a fix record
100%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 20
  3. 21
  4. 22
  5. 24
  6. 25
  7. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

78 records
  • CVE-2017-9115
    36Monitor

    In OpenEXR 2.2.0, an invalid write of size 2 in the = operator function in half.h could cause the application to crash or execute arbitrary

    HighCVSS 8.8No exploitEPSS 3%

    openexr · openexrMay 21, 2017

  • CVE-2017-9111
    36Monitor

    In OpenEXR 2.2.0, an invalid write of size 8 in the storeSSE function in ImfOptimizedPixelReading.h could cause the application to crash or

    HighCVSS 8.8No exploitEPSS 3%

    openexr · openexrMay 21, 2017

  • CVE-2017-9113
    36Monitor

    In OpenEXR 2.2.0, an invalid write of size 1 in the bufferedReadPixels function in ImfInputFile.cpp could cause the application to crash or

    HighCVSS 8.8No exploitEPSS 3%

    openexr · openexrMay 21, 2017

  • CVE-2021-23169
    36Monitor

    A heap-buffer overflow was found in the copyIntoFrameBuffer function of OpenEXR in versions before 3.0.1.

    HighCVSS 8.8No exploitEPSS 2%

    openexr · openexrJun 8, 2021

  • CVE-2023-5841
    36Monitor

    OpenEXR Heap Overflow in Scanline Deep Data Parsing

    CriticalCVSS 9.1No exploitEPSS 1%

    openexr · openexrFeb 1, 2024

  • CVE-2026-42216
    35Monitor

    OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion

    HighCVSS 8.8No exploitEPSS 0%

    openexr · openexrMay 7, 2026

  • CVE-2026-41142
    35Monitor

    OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API

    HighCVSS 8.8No exploitEPSS 0%

    openexr · openexrMay 7, 2026

  • CVE-2026-34588
    34Monitor

    OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

    HighCVSS 8.6No exploitEPSS 0%

    openexr · openexrApr 6, 2026

  • CVE-2026-34543
    34Monitor

    OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)

    HighCVSS 8.7No exploitEPSS 0%

    openexr · openexrApr 1, 2026

  • CVE-2026-34545
    33Monitor

    OpenEXR: integer overflow lead to OOB in HTJ2K decoder

    HighCVSS 8.4No exploitEPSS 0%

    openexr · openexrApr 1, 2026

  • CVE-2026-40250
    33Monitor

    OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)

    HighCVSS 8.4No exploitEPSS 0%

    openexr · openexrApr 21, 2026

  • CVE-2026-40244
    33Monitor

    OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)

    HighCVSS 8.4No exploitEPSS 0%

    openexr · openexrApr 21, 2026

  • CVE-2026-34589
    33Monitor

    OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write

    HighCVSS 8.4No exploitEPSS 0%

    openexr · openexrApr 6, 2026

  • CVE-2026-45696
    33Monitor

    OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)

    HighCVSS 8.3No exploitEPSS 0%

    openexr · openexrJun 18, 2026

  • CVE-2025-48071
    33Monitor

    OpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline Parsing

    HighCVSS 8.4No exploitEPSS 0%

    openexr · openexrJul 31, 2025

  • CVE-2026-34544
    33Monitor

    OpenEXR: integer overflow to OOB write in uncompress_b44_impl()

    HighCVSS 8.4No exploitEPSS 0%

    openexr · openexrApr 1, 2026

  • CVE-2026-27622
    33Monitor

    OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

    HighCVSS 8.4No exploitEPSS 0%

    openexr · openexrMar 3, 2026

  • CVE-2009-1720
    32Monitor

    Multiple integer overflows in OpenEXR 1.2.2 and 1.6.1 allow context-dependent attackers to cause a denial of service (application crash) or

    HighCVSS 7.5No exploitEPSS 6%

    openexr · openexrJul 31, 2009

  • CVE-2017-12596
    32Monitor

    In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled ex

    HighCVSS 7.8No exploitEPSS 1%

    openexr · openexrAug 6, 2017

  • CVE-2021-20304
    31Monitor

    A flaw was found in OpenEXR's hufDecode functionality.

    HighCVSS 7.5No exploitEPSS 2%

    openexr · openexrAug 23, 2022

  • CVE-2021-20299
    31Monitor

    A flaw was found in OpenEXR's Multipart input file functionality.

    HighCVSS 7.5No exploitEPSS 1%

    openexr · openexrMar 16, 2022

  • CVE-2025-12495
    31Monitor

    Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    openexr · openexrDec 23, 2025

  • CVE-2025-12839
    31Monitor

    Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    openexr · openexrDec 23, 2025

  • CVE-2025-12840
    31Monitor

    Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 7.8No exploitEPSS 0%

    openexr · openexrDec 23, 2025

  • CVE-2021-20298
    30Monitor

    A flaw was found in OpenEXR's B44Compressor.

    HighCVSS 7.5No exploitEPSS 1%

    openexr · openexrAug 23, 2022