Search CVE reports


Toggle filters

21 – 30 of 80 results


CVE-2025-12495

Medium priority
Vulnerable

Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Vulnerable Vulnerable Not affected Not affected Not affected
Show less packages

CVE-2025-64183

Medium priority
Ignored

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, there...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-64182

Medium priority
Ignored

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.2.0 through 3.2.4, 3.3.0 through 3.3.5, and 3.4.0 through 3.4.2, a...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-64181

Medium priority
Ignored

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.0 through 3.3.5 and 3.4.0 through 3.4.2, while...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-48074

Medium priority
Ignored

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, applications trust unvalidated dataWindow size values from file...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-48073

Medium priority
Ignored

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In version 3.3.2, when reading a deep scanline image with a large sample count in...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-48072

Medium priority
Vulnerable

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. Version 3.3.2 is vulnerable to a heap-based buffer overflow during a read operation...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Vulnerable Not affected Not affected Not affected Not affected
Show less packages

CVE-2025-48071

Medium priority
Ignored

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In versions 3.3.2 through 3.3.0, there is a heap-based buffer overflow during a write...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Not affected Not affected Not affected
Show less packages

CVE-2024-31047

Medium priority
Vulnerable

An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service (DoS) via the convert function of exrmultipart.cpp.

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Vulnerable Vulnerable Vulnerable Vulnerable
Show less packages

CVE-2023-5841

Medium priority
Vulnerable

Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer...

1 affected package

openexr

Package 26.04 LTS 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
openexr Not affected Vulnerable Not affected Not affected Not affected
Show less packages