AIKIDO-2026-64261
AcademySoftwareFoundation.openexr is vulnerable to Out-of-bounds Write
61
Medium Risk
This Affects:
AcademySoftwareFoundation.openexrTL;DR
The exrmetrics command-line tool computes the pixel count of a deep tiled image as a 64-bit value but passes it to a vector resize that truncates on 32-bit builds, undersizing the sample-count table. The deep tiled reader then copies sample-count data for the declared image dimensions into that truncated vector, writing past the end of the allocation. A crafted deep tiled file with very large dimensions run through a 32-bit exrmetrics produces a heap buffer overflow and crash. The fix rejects or correctly sizes the oversized sample-count allocation.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you run the 32-bit (ILP32) exrmetrics tool on untrusted deep tiled EXR files.
Background info
AcademySoftwareFoundation.openexr is vulnerable to Out-of-bounds Write in versions 3.3.0 - 3.4.13.
How to fix this
Upgrade the AcademySoftwareFoundation.openexr library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant