AIKIDO-2026-847130
AcademySoftwareFoundation.openexr is vulnerable to Out-of-bounds Write
55
Medium Risk
This Affects:
AcademySoftwareFoundation.openexrTL;DR
The exrmultiview tool builds a subsampled channel union into a destination buffer without correctly accounting for subsampled layout, allowing a crafted EXR to write past the heap allocation. Running exrmultiview on such a file can crash the tool or corrupt memory. The fix corrects subsampled union buffer sizing and writes.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you run the exrmultiview tool on untrusted EXR files with subsampled channels.
Background info
AcademySoftwareFoundation.openexr is vulnerable to Out-of-bounds Write in versions 2.0.0 - 3.4.13.
How to fix this
Upgrade the AcademySoftwareFoundation.openexr library to the patch version.
Links
Fix Commits
github.com/AcademySoftwareFoundation/openexr/commit/77ee19c021398b1c56f32c3af8347e365dbd4f33github.com/AcademySoftwareFoundation/openexr/commit/c644ac2dfeac82939c81a8551d6f4b7859f63addgithub.com/AcademySoftwareFoundation/openexr/commit/e2300a3d54a93d20a36a86b82f3a506c4c91476f
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.