Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-27622

Fixed in a distro release EPSS <1%CVSS 8.4

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In CompositeDeepScanLine::readPixels, per-pixel totals are accumulated in vector<unsigned int> total_sizes for attacker-controlled large counts across many parts, total_sizes[ptr] wraps modulo 2^32. overall_sample_count is then derived from wrapped totals and used in samples[channel].resize(overall_sample_count). Decode pointer setup/consumption proceeds with true sample counts, and write operations in core unpack (generic_unpack_deep_pointers) overrun the undersized composite sample buffer. This vulnerability is fixed in v3.2.6, v3.3.8, and v3.4.6.

Published 2026-03-03 · CVE record · OSV

Products: AcademySoftwareFoundation openexr, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat AI Inference Server 3.3, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

Fixed upstream

EcosystemPackageFixed in
PyPIopenexr3.2.6
PyPIopenexr3.3.8
PyPIopenexr3.4.6

Distro releases

ReleasePackageFixed in
AlmaLinux 10openexr3.1.10-8.el10_1.1
AlmaLinux 10openexr-devel3.1.10-8.el10_1.1
AlmaLinux 10openexr-libs3.1.10-8.el10_1.1
AlmaLinux 8OpenEXR-devel2.2.0-12.el8_10.1
AlmaLinux 8OpenEXR-libs2.2.0-12.el8_10.1
AlmaLinux 9openexr3.1.1-3.el9_7.1
AlmaLinux 9openexr-devel3.1.1-3.el9_7.1
AlmaLinux 9openexr-libs3.1.1-3.el9_7.1
Debian 12openexrno fix
Debian 13openexrno fix
Debian 14openexr3.4.6+ds-1
Red Hat Enterprise Linux 10.1openexr0:3.1.10-8.el10_1.1
Red Hat Enterprise Linux 10.1openexr-debuginfo0:3.1.10-8.el10_1.1
Red Hat Enterprise Linux 10.1openexr-debugsource0:3.1.10-8.el10_1.1
Red Hat Enterprise Linux 10.1openexr-devel0:3.1.10-8.el10_1.1
Red Hat Enterprise Linux 10.1openexr-libs0:3.1.10-8.el10_1.1
Red Hat Enterprise Linux 10.1openexr-libs-debuginfo0:3.1.10-8.el10_1.1
Red Hat Enterprise Linux 8OpenEXR0:2.2.0-12.el8_10.1
Red Hat Enterprise Linux 8OpenEXR-debuginfo0:2.2.0-12.el8_10.1
Red Hat Enterprise Linux 8OpenEXR-debugsource0:2.2.0-12.el8_10.1
Red Hat Enterprise Linux 8OpenEXR-devel0:2.2.0-12.el8_10.1
Red Hat Enterprise Linux 8OpenEXR-libs0:2.2.0-12.el8_10.1
Red Hat Enterprise Linux 8OpenEXR-libs-debuginfo0:2.2.0-12.el8_10.1
Red Hat Enterprise Linux 9openexr0:3.1.1-3.el9_7.1
Red Hat Enterprise Linux 9openexr-debuginfo0:3.1.1-3.el9_7.1
Red Hat Enterprise Linux 9openexr-debugsource0:3.1.1-3.el9_7.1
Red Hat Enterprise Linux 9openexr-devel0:3.1.1-3.el9_7.1
Red Hat Enterprise Linux 9openexr-libs0:3.1.1-3.el9_7.1
Red Hat Enterprise Linux 9openexr-libs-debuginfo0:3.1.1-3.el9_7.1
Red Hat Enterprise Linux eus 10.0openexr0:3.1.10-8.el10_0.1
Red Hat Enterprise Linux eus 10.0openexr-libs0:3.1.10-8.el10_0.1
Red Hat rhel aus 8.2OpenEXR0:2.2.0-11.el8_2.1
Red Hat rhel aus 8.2OpenEXR-debuginfo0:2.2.0-11.el8_2.1
Red Hat rhel aus 8.2OpenEXR-debugsource0:2.2.0-11.el8_2.1
Red Hat rhel aus 8.2OpenEXR-libs0:2.2.0-11.el8_2.1
Red Hat rhel aus 8.2OpenEXR-libs-debuginfo0:2.2.0-11.el8_2.1
Red Hat rhel aus 8.4OpenEXR0:2.2.0-12.el8_4.1
Red Hat rhel aus 8.4OpenEXR-debuginfo0:2.2.0-12.el8_4.1
Red Hat rhel aus 8.4OpenEXR-debugsource0:2.2.0-12.el8_4.1
Red Hat rhel aus 8.4OpenEXR-libs0:2.2.0-12.el8_4.1
Red Hat rhel aus 8.4OpenEXR-libs-debuginfo0:2.2.0-12.el8_4.1
Red Hat rhel aus 8.6OpenEXR0:2.2.0-12.el8_6.1
Red Hat rhel aus 8.6OpenEXR-debuginfo0:2.2.0-12.el8_6.1
Red Hat rhel aus 8.6OpenEXR-debugsource0:2.2.0-12.el8_6.1
Red Hat rhel aus 8.6OpenEXR-libs0:2.2.0-12.el8_6.1
Red Hat rhel aus 8.6OpenEXR-libs-debuginfo0:2.2.0-12.el8_6.1
Red Hat rhel e4s 8.6OpenEXR0:2.2.0-12.el8_6.1
Red Hat rhel e4s 8.6OpenEXR-debuginfo0:2.2.0-12.el8_6.1
Red Hat rhel e4s 8.6OpenEXR-debugsource0:2.2.0-12.el8_6.1
Red Hat rhel e4s 8.6OpenEXR-libs0:2.2.0-12.el8_6.1
Red Hat rhel e4s 8.6OpenEXR-libs-debuginfo0:2.2.0-12.el8_6.1
Red Hat rhel e4s 8.8OpenEXR0:2.2.0-12.el8_8.1
Red Hat rhel e4s 8.8OpenEXR-debuginfo0:2.2.0-12.el8_8.1
Red Hat rhel e4s 8.8OpenEXR-debugsource0:2.2.0-12.el8_8.1
Red Hat rhel e4s 8.8OpenEXR-libs0:2.2.0-12.el8_8.1
Red Hat rhel e4s 8.8OpenEXR-libs-debuginfo0:2.2.0-12.el8_8.1
Red Hat rhel e4s 9.0openexr0:3.1.1-2.el9_0.2
Red Hat rhel e4s 9.0openexr-debuginfo0:3.1.1-2.el9_0.2
Red Hat rhel e4s 9.0openexr-debugsource0:3.1.1-2.el9_0.2
Red Hat rhel e4s 9.0openexr-libs0:3.1.1-2.el9_0.2
Red Hat rhel e4s 9.0openexr-libs-debuginfo0:3.1.1-2.el9_0.2
Red Hat rhel e4s 9.2openexr0:3.1.1-2.el9_2.2
Red Hat rhel e4s 9.2openexr-debuginfo0:3.1.1-2.el9_2.2
Red Hat rhel e4s 9.2openexr-debugsource0:3.1.1-2.el9_2.2
Red Hat rhel e4s 9.2openexr-libs0:3.1.1-2.el9_2.2
Red Hat rhel e4s 9.2openexr-libs-debuginfo0:3.1.1-2.el9_2.2
Red Hat rhel eus 9.4openexr0:3.1.1-2.el9_4.2
Red Hat rhel eus 9.4openexr-debuginfo0:3.1.1-2.el9_4.2
Red Hat rhel eus 9.4openexr-debugsource0:3.1.1-2.el9_4.2
Red Hat rhel eus 9.4openexr-devel0:3.1.1-2.el9_4.2
Red Hat rhel eus 9.4openexr-libs0:3.1.1-2.el9_4.2
Red Hat rhel eus 9.4openexr-libs-debuginfo0:3.1.1-2.el9_4.2
Red Hat rhel eus 9.6openexr0:3.1.1-3.el9_6.1
Red Hat rhel eus 9.6openexr-debuginfo0:3.1.1-3.el9_6.1
Red Hat rhel eus 9.6openexr-debugsource0:3.1.1-3.el9_6.1
Red Hat rhel eus 9.6openexr-devel0:3.1.1-3.el9_6.1
Red Hat rhel eus 9.6openexr-libs0:3.1.1-3.el9_6.1
Red Hat rhel eus 9.6openexr-libs-debuginfo0:3.1.1-3.el9_6.1
Red Hat rhel eus long life 8.4OpenEXR0:2.2.0-12.el8_4.1
Red Hat rhel eus long life 8.4OpenEXR-debuginfo0:2.2.0-12.el8_4.1
Red Hat rhel eus long life 8.4OpenEXR-debugsource0:2.2.0-12.el8_4.1
Red Hat rhel eus long life 8.4OpenEXR-libs0:2.2.0-12.el8_4.1
Red Hat rhel eus long life 8.4OpenEXR-libs-debuginfo0:2.2.0-12.el8_4.1
Red Hat rhel tus 8.6OpenEXR0:2.2.0-12.el8_6.1
Red Hat rhel tus 8.6OpenEXR-debuginfo0:2.2.0-12.el8_6.1
Red Hat rhel tus 8.6OpenEXR-debugsource0:2.2.0-12.el8_6.1
Red Hat rhel tus 8.6OpenEXR-libs0:2.2.0-12.el8_6.1
Red Hat rhel tus 8.6OpenEXR-libs-debuginfo0:2.2.0-12.el8_6.1
Red Hat rhel tus 8.8OpenEXR0:2.2.0-12.el8_8.1
Red Hat rhel tus 8.8OpenEXR-debuginfo0:2.2.0-12.el8_8.1
Red Hat rhel tus 8.8OpenEXR-debugsource0:2.2.0-12.el8_8.1
Red Hat rhel tus 8.8OpenEXR-libs0:2.2.0-12.el8_8.1
Red Hat rhel tus 8.8OpenEXR-libs-debuginfo0:2.2.0-12.el8_8.1
Rocky Linux 10openexr0:3.1.10-8.el10_1.1
Rocky Linux 8OpenEXR0:2.2.0-12.el8_10.1
Rocky Linux 9openexr0:3.1.1-3.el9_7.1
SUSE Linux Enterprise Server 16.0openexr3.2.2-160000.5.1
SUSE Linux Enterprise Server for SAP applications 16.0openexr3.2.2-160000.5.1
Ubuntu 25.10openexrno fix
Ubuntu Pro 16.04 LTSopenexr2.2.0-10ubuntu2.6+esm4
Ubuntu Pro 18.04 LTSopenexr2.2.0-11.1ubuntu1.9+esm1
Ubuntu Pro 20.04 LTSopenexr2.3.0-6ubuntu0.5+esm2
Ubuntu Pro 22.04 LTSopenexr2.5.7-1ubuntu0.1~esm2
Ubuntu Pro 24.04 LTSopenexr3.1.5-5.1ubuntu0.1~esm1
Ubuntu Pro 26.04 LTSopenexr3.1.13-2ubuntu0.26.04.1~esm1
openSUSE Leap 16.0openexr3.2.2-160000.5.1
openSUSE Tumbleweedopenexr3.4.6-1.1