CVE-2026-34544
Fixed in a distro release EPSS <1%CVSS 8.4
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that decodes it via exr_decoding_run(). Consequences range from immediate crash (most likely) to corruption of adjacent heap allocations (layout-dependent). This issue has been patched in version 3.4.8.
Products: AcademySoftwareFoundation openexr
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | openexr | 3.4.8 |
| PyPI | openexr | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | openexr | 3.1.10-8.el10_2.5 |
| AlmaLinux 10 | openexr-devel | 3.1.10-8.el10_2.5 |
| AlmaLinux 10 | openexr-libs | 3.1.10-8.el10_2.5 |
| AlmaLinux 9 | openexr-devel | 3.1.1-3.el9_8.5 |
| Amazon Linux 2 | OpenEXR | 1.7.1-8.amzn2.0.5 |
| Amazon Linux 2 | OpenEXR-devel | 1.7.1-8.amzn2.0.5 |
| Amazon Linux 2 | OpenEXR-libs | 1.7.1-8.amzn2.0.5 |
| Amazon Linux 2023 | openexr | 3.1.5-1.amzn2023.0.8 |
| Amazon Linux 2023 | openexr-devel | 3.1.5-1.amzn2023.0.8 |
| Amazon Linux 2023 | openexr-libs | 3.1.5-1.amzn2023.0.8 |
| Chainguard | openexr | 3.4.9-r0 |
| Chainguard | openexr-dev | 3.4.9-r0 |
| Chainguard | openexr-doc | 3.4.9-r0 |
| Chainguard | openexr-libiex | 3.4.9-r0 |
| Chainguard | openexr-libilmthread | 3.4.9-r0 |
| Chainguard | openexr-libopenexr | 3.4.9-r0 |
| Chainguard | openexr-libopenexrcore | 3.4.9-r0 |
| Chainguard | openexr-libopenexrutil | 3.4.9-r0 |
| Debian 12 | openexr | no fix |
| Debian 13 | openexr | no fix |
| Debian 14 | openexr | 3.4.14-0.1 |
| Red Hat Enterprise Linux 10.2 | openexr | 0:3.1.10-8.el10_2.5 |
| Red Hat Enterprise Linux 10.2 | openexr-debuginfo | 0:3.1.10-8.el10_2.5 |
| Red Hat Enterprise Linux 10.2 | openexr-debugsource | 0:3.1.10-8.el10_2.5 |
| Red Hat Enterprise Linux 10.2 | openexr-devel | 0:3.1.10-8.el10_2.5 |
| Red Hat Enterprise Linux 10.2 | openexr-libs | 0:3.1.10-8.el10_2.5 |
| Red Hat Enterprise Linux 10.2 | openexr-libs-debuginfo | 0:3.1.10-8.el10_2.5 |
| Rocky Linux 10 | openexr | 0:3.1.10-8.el10_2.5 |
| Rocky Linux 9 | openexr | 0:3.1.1-3.el9_8.5 |
| Ubuntu 26.10 | openexr | no fix |
| Wolfi | openexr | 3.4.9-r0 |
| Wolfi | openexr-dev | 3.4.9-r0 |
| Wolfi | openexr-doc | 3.4.9-r0 |
| Wolfi | openexr-libiex | 3.4.9-r0 |
| Wolfi | openexr-libilmthread | 3.4.9-r0 |
| Wolfi | openexr-libopenexr | 3.4.9-r0 |
| Wolfi | openexr-libopenexrcore | 3.4.9-r0 |
| Wolfi | openexr-libopenexrutil | 3.4.9-r0 |
| openSUSE Tumbleweed | openexr | 3.4.9-1.1 |