AIKIDO-2026-468680
AcademySoftwareFoundation.openexr is vulnerable to Heap-based Buffer Overflow
70
High Risk
This Affects:
AcademySoftwareFoundation.openexrTL;DR
On ILP32 builds, DWAA InputFile packed AC buffer handling multiplies or accumulates attacker-controlled dimension and sample fields with 32-bit arithmetic before allocating decode buffers. A crafted DWAA-compressed EXR can overflow those size computations, produce an undersized buffer, and trigger a packed AC buffer heap overflow. Typical 64-bit builds are not affected. The fix rejects oversized size computations before allocation.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you run a 32-bit (ILP32) build that decodes untrusted DWAA-compressed EXR files.
Background info
AcademySoftwareFoundation.openexr is vulnerable to Heap-based Buffer Overflow in versions 3.3.0 - 3.3.12 and 3.4.0 - 3.4.13.
How to fix this
Upgrade the AcademySoftwareFoundation.openexr library to the patch version.
Links
Fix Commits
github.com/AcademySoftwareFoundation/openexr/commit/37f03b6ed90f3dd9910f31de3a40f25f2bc2aca1github.com/AcademySoftwareFoundation/openexr/commit/55b7958ecb5ac32c427ff39c1e063f6f7bbee77cgithub.com/AcademySoftwareFoundation/openexr/commit/aef02224ba282a802de65d16c49c1cdb82089dec
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.