agentprime: academysoftwarefoundation-openexrEvery new CVE for academysoftwarefoundation-openexr.https://agentprime.io/CVE-2026-59981: OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindowhttps://agentprime.io/advisories/CVE-2026-59981/https://agentprime.io/advisories/CVE-2026-59981/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 19:58:37 GMTCVECVE-2026-68514: OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision in deep imageshttps://agentprime.io/advisories/CVE-2026-68514/https://agentprime.io/advisories/CVE-2026-68514/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 19:40:04 GMTCVECVE-2026-68515: OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel unionhttps://agentprime.io/advisories/CVE-2026-68515/https://agentprime.io/advisories/CVE-2026-68515/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 19:34:15 GMTCVECVE-2026-68513: OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collisionhttps://agentprime.io/advisories/CVE-2026-68513/https://agentprime.io/advisories/CVE-2026-68513/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 19:06:11 GMTCVECVE-2026-65979: OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)https://agentprime.io/advisories/CVE-2026-65979/https://agentprime.io/advisories/CVE-2026-65979/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 18:58:25 GMTCVECVE-2026-62986: OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosurehttps://agentprime.io/advisories/CVE-2026-62986/https://agentprime.io/advisories/CVE-2026-62986/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 18:27:19 GMTCVECVE-2026-61555: OpenEXR: Empty multiView viewFromChannelName file crashhttps://agentprime.io/advisories/CVE-2026-61555/https://agentprime.io/advisories/CVE-2026-61555/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 18:19:30 GMTCVECVE-2026-59985: OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP32https://agentprime.io/advisories/CVE-2026-59985/https://agentprime.io/advisories/CVE-2026-59985/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 18:16:37 GMTCVECVE-2026-59984: OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP32https://agentprime.io/advisories/CVE-2026-59984/https://agentprime.io/advisories/CVE-2026-59984/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 18:13:01 GMTCVECVE-2026-59983: OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP32https://agentprime.io/advisories/CVE-2026-59983/https://agentprime.io/advisories/CVE-2026-59983/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 18:02:42 GMTCVECVE-2026-59982: OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platformshttps://agentprime.io/advisories/CVE-2026-59982/https://agentprime.io/advisories/CVE-2026-59982/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 17:59:25 GMTCVECVE-2026-59189: OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow originhttps://agentprime.io/advisories/CVE-2026-59189/https://agentprime.io/advisories/CVE-2026-59189/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 16:51:31 GMTCVECVE-2026-59187: OpenEXR: exrmetrics deep pixelmode heap buffer overflowhttps://agentprime.io/advisories/CVE-2026-59187/https://agentprime.io/advisories/CVE-2026-59187/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 16:38:51 GMTCVECVE-2026-59186: OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) buildshttps://agentprime.io/advisories/CVE-2026-59186/https://agentprime.io/advisories/CVE-2026-59186/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 16:35:58 GMTCVECVE-2026-59184: OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB writehttps://agentprime.io/advisories/CVE-2026-59184/https://agentprime.io/advisories/CVE-2026-59184/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 16:28:47 GMTCVECVE-2026-59183: OpenEXR: Signed Integer Overflow Leading to Out-of-Bounds Memory Access in Deep Tile Decodinghttps://agentprime.io/advisories/CVE-2026-59183/https://agentprime.io/advisories/CVE-2026-59183/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 00:45:02 GMTCVECVE-2026-55373: OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample countshttps://agentprime.io/advisories/CVE-2026-55373/https://agentprime.io/advisories/CVE-2026-55373/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 00:39:45 GMTCVECVE-2026-55371: OpenEXR: OpenEXRCore exr_attr_set_bytes() accepts NULL type_hint with positive hint_lengthhttps://agentprime.io/advisories/CVE-2026-55371/https://agentprime.io/advisories/CVE-2026-55371/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 00:31:35 GMTCVECVE-2026-55059: OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write vulnerabilityhttps://agentprime.io/advisories/CVE-2026-55059/https://agentprime.io/advisories/CVE-2026-55059/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 00:16:01 GMTCVECVE-2026-54920: OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resizehttps://agentprime.io/advisories/CVE-2026-54920/https://agentprime.io/advisories/CVE-2026-54920/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 00:10:39 GMTCVECVE-2026-53532: OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)https://agentprime.io/advisories/CVE-2026-53532/https://agentprime.io/advisories/CVE-2026-53532/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 22:24:02 GMTCVECVE-2026-68516: OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflowhttps://agentprime.io/advisories/CVE-2026-68516/https://agentprime.io/advisories/CVE-2026-68516/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 22:08:49 GMTCVECVE-2026-45696: OpenEXR HTJ2K decoder heap buffer over-read in ht_undo_impl() (DoS)https://agentprime.io/advisories/CVE-2026-45696/https://agentprime.io/advisories/CVE-2026-45696/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 20:31:56 GMTCVECVE-2026-44663: OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflowhttps://agentprime.io/advisories/CVE-2026-44663/https://agentprime.io/advisories/CVE-2026-44663/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 20:20:15 GMTCVECVE-2026-42217: OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)https://agentprime.io/advisories/CVE-2026-42217/https://agentprime.io/advisories/CVE-2026-42217/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 04:04:54 GMTCVECVE-2026-42216: OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansionhttps://agentprime.io/advisories/CVE-2026-42216/https://agentprime.io/advisories/CVE-2026-42216/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 04:01:59 GMTCVECVE-2026-41142: OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public APIhttps://agentprime.io/advisories/CVE-2026-41142/https://agentprime.io/advisories/CVE-2026-41142/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 07 May 2026 03:58:09 GMTCVECVE-2026-40250: OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)https://agentprime.io/advisories/CVE-2026-40250/https://agentprime.io/advisories/CVE-2026-40250/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 01:33:00 GMTCVECVE-2026-40244: OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)https://agentprime.io/advisories/CVE-2026-40244/https://agentprime.io/advisories/CVE-2026-40244/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 01:30:55 GMTCVECVE-2026-39886: OpenEXR has HTJ2K Signed Integer Overflow in ht_undo_impl()https://agentprime.io/advisories/CVE-2026-39886/https://agentprime.io/advisories/CVE-2026-39886/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Apr 2026 01:27:01 GMTCVECVE-2026-34380: OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompressionhttps://agentprime.io/advisories/CVE-2026-34380/https://agentprime.io/advisories/CVE-2026-34380/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 15:22:40 GMTCVECVE-2026-34379: OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)https://agentprime.io/advisories/CVE-2026-34379/https://agentprime.io/advisories/CVE-2026-34379/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 15:21:06 GMTCVECVE-2026-34378: OpenEXR has a signed integer overflow in generic_unpack() when parsing EXR files with crafted negative dataWindow.min.xhttps://agentprime.io/advisories/CVE-2026-34378/https://agentprime.io/advisories/CVE-2026-34378/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 15:19:34 GMTCVECVE-2026-34545: OpenEXR: integer overflow lead to OOB in HTJ2K decoderhttps://agentprime.io/advisories/CVE-2026-34545/https://agentprime.io/advisories/CVE-2026-34545/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 20:51:45 GMTCVE