AIKIDO-2026-552159
AcademySoftwareFoundation.openexr is vulnerable to Out-of-bounds Read
70
High Risk
This Affects:
AcademySoftwareFoundation.openexrTL;DR
On ILP32 builds, DeepTiledInputFile sample-count table decode multiplies or accumulates attacker-controlled dimension and sample fields with 32-bit arithmetic before allocating decode buffers. A crafted deep tiled EXR can overflow those size computations, produce an undersized buffer, and trigger a out-of-bounds read of the sample-count table. Typical 64-bit builds are not affected. The fix rejects oversized size computations before allocation.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you run a 32-bit (ILP32) build that decodes untrusted deep tiled EXR files.
Background info
AcademySoftwareFoundation.openexr is vulnerable to Out-of-bounds Read in versions 3.3.0 - 3.3.12 and 3.4.0 - 3.4.13.
How to fix this
Upgrade the AcademySoftwareFoundation.openexr library to the patch version.
Links
Fix Commits
github.com/AcademySoftwareFoundation/openexr/commit/0efec58d2d28a0ee322f5028dee6fb57d459580egithub.com/AcademySoftwareFoundation/openexr/commit/78e91146fceeee317820a146ba99a96f380945b8github.com/AcademySoftwareFoundation/openexr/commit/f0e404f7298cd8563a1d30a64a1c982dbd68fc49
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.