https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T17:35:41.053438+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/bell-cve-2026-59183 BELL-CVE-2026-59183 2026-09-28T17:35:41.137614+00:00

Affected: Alpaquita:stream: openexr

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-59183 fkie_cve-2026-59183 2026-09-28T17:35:41.137839+00:00

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32_t multiplication in OpenEXRCore's unpack_sample_table() can overflow while decoding a crafted deep tiled EXR file, producing an invalid pointer that leads to a read from an unmapped memory address and a crash. Because the overflow occurs in the standard decoding path (exr_decoding_run), any application that decodes deep tiled EXR files is affected. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.

 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11612-1 openSUSE-SU-2026:11612-1 — libIex-3_4-33-3.4.14-1.1 on GA media 2026-09-28T17:35:41.137919+00:00

libIex-3_4-33-3.4.14-1.1 on GA media

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-59183 UBUNTU-CVE-2026-59183 2026-09-28T17:35:41.137975+00:00

Affected: Ubuntu:Pro:16.04:LTS: openexr, Ubuntu:Pro:18.04:LTS: openexr, Ubuntu:Pro:20.04:LTS: openexr, Ubuntu:Pro:22.04:LTS: openexr, Ubuntu:Pro:24.04:LTS: openexr, Ubuntu:Pro:26.04:LTS: openexr

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13, an int32_t multiplication in OpenEXRCore's unpack_sample_table() can overflow while decoding a crafted deep tiled EXR file, producing an invalid pointer that leads to a read from an unmapped memory address and a crash. Because the overflow occurs in the standard decoding path (exr_decoding_run), any application that decodes deep tiled EXR files is affected. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.