Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-34588

Fixed in a distro release EPSS <1%CVSS 8.6

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internal_exr_undo_piz() advances the working wavelet pointer with signed 32-bit arithmetic. Because nx, ny, and wcount are int, a crafted EXR file can make this product overflow and wrap. The next channel then decodes from an incorrect address. The wavelet decode path operates in place, so this yields both out-of-bounds reads and out-of-bounds writes. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9.

Published 2026-04-06 · CVE record · OSV

Products: AcademySoftwareFoundation openexr, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat AI Inference Server 3.3, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8

Fixed upstream

EcosystemPackageFixed in
PyPIopenexr3.2.7
PyPIopenexr3.3.9
PyPIopenexr3.4.9

Distro releases

ReleasePackageFixed in
AlmaLinux 10openexr3.1.10-8.el10_2.2
AlmaLinux 10openexr3.1.10-8.el10_1.2
AlmaLinux 10openexr-devel3.1.10-8.el10_1.2
AlmaLinux 10openexr-devel3.1.10-8.el10_2.2
AlmaLinux 10openexr-libs3.1.10-8.el10_2.2
AlmaLinux 10openexr-libs3.1.10-8.el10_1.2
AlmaLinux 9openexr3.1.1-3.el9_7.2
AlmaLinux 9openexr3.1.1-3.el9_8.2
AlmaLinux 9openexr-devel3.1.1-3.el9_7.2
AlmaLinux 9openexr-devel3.1.1-3.el9_8.2
AlmaLinux 9openexr-libs3.1.1-3.el9_7.2
AlmaLinux 9openexr-libs3.1.1-3.el9_8.2
Debian 12openexrno fix
Debian 13openexrno fix
Debian 14openexr3.4.14-0.1
Red Hat Enterprise Linux 10.1openexr0:3.1.10-8.el10_1.2
Red Hat Enterprise Linux 10.1openexr-debuginfo0:3.1.10-8.el10_1.2
Red Hat Enterprise Linux 10.1openexr-debugsource0:3.1.10-8.el10_1.2
Red Hat Enterprise Linux 10.1openexr-devel0:3.1.10-8.el10_1.2
Red Hat Enterprise Linux 10.1openexr-libs0:3.1.10-8.el10_1.2
Red Hat Enterprise Linux 10.1openexr-libs-debuginfo0:3.1.10-8.el10_1.2
Red Hat Enterprise Linux 10.2openexr0:3.1.10-8.el10_2.2
Red Hat Enterprise Linux 10.2openexr-debuginfo0:3.1.10-8.el10_2.2
Red Hat Enterprise Linux 10.2openexr-debugsource0:3.1.10-8.el10_2.2
Red Hat Enterprise Linux 10.2openexr-devel0:3.1.10-8.el10_2.2
Red Hat Enterprise Linux 10.2openexr-libs0:3.1.10-8.el10_2.2
Red Hat Enterprise Linux 10.2openexr-libs-debuginfo0:3.1.10-8.el10_2.2
Red Hat Enterprise Linux 9openexr0:3.1.1-3.el9_8.2
Red Hat Enterprise Linux 9openexr0:3.1.1-3.el9_7.2
Red Hat Enterprise Linux 9openexr-debuginfo0:3.1.1-3.el9_8.2
Red Hat Enterprise Linux 9openexr-debuginfo0:3.1.1-3.el9_7.2
Red Hat Enterprise Linux 9openexr-debugsource0:3.1.1-3.el9_8.2
Red Hat Enterprise Linux 9openexr-debugsource0:3.1.1-3.el9_7.2
Red Hat Enterprise Linux 9openexr-devel0:3.1.1-3.el9_8.2
Red Hat Enterprise Linux 9openexr-devel0:3.1.1-3.el9_7.2
Red Hat Enterprise Linux 9openexr-libs0:3.1.1-3.el9_7.2
Red Hat Enterprise Linux 9openexr-libs0:3.1.1-3.el9_8.2
Red Hat Enterprise Linux 9openexr-libs-debuginfo0:3.1.1-3.el9_8.2
Red Hat Enterprise Linux 9openexr-libs-debuginfo0:3.1.1-3.el9_7.2
Red Hat Enterprise Linux eus 10.0openexr0:3.1.10-8.el10_0.2
Red Hat Enterprise Linux eus 10.0openexr-debuginfo0:3.1.10-8.el10_0.2
Red Hat Enterprise Linux eus 10.0openexr-debugsource0:3.1.10-8.el10_0.2
Red Hat Enterprise Linux eus 10.0openexr-devel0:3.1.10-8.el10_0.2
Red Hat Enterprise Linux eus 10.0openexr-libs0:3.1.10-8.el10_0.2
Red Hat Enterprise Linux eus 10.0openexr-libs-debuginfo0:3.1.10-8.el10_0.2
Red Hat rhel e4s 9.0openexr0:3.1.1-2.el9_0.3
Red Hat rhel e4s 9.0openexr-debuginfo0:3.1.1-2.el9_0.3
Red Hat rhel e4s 9.0openexr-debugsource0:3.1.1-2.el9_0.3
Red Hat rhel e4s 9.0openexr-libs0:3.1.1-2.el9_0.3
Red Hat rhel e4s 9.0openexr-libs-debuginfo0:3.1.1-2.el9_0.3
Red Hat rhel e4s 9.2openexr0:3.1.1-2.el9_2.3
Red Hat rhel e4s 9.2openexr-debuginfo0:3.1.1-2.el9_2.3
Red Hat rhel e4s 9.2openexr-debugsource0:3.1.1-2.el9_2.3
Red Hat rhel e4s 9.2openexr-libs0:3.1.1-2.el9_2.3
Red Hat rhel e4s 9.2openexr-libs-debuginfo0:3.1.1-2.el9_2.3
Red Hat rhel eus 9.4openexr0:3.1.1-2.el9_4.3
Red Hat rhel eus 9.4openexr-debuginfo0:3.1.1-2.el9_4.3
Red Hat rhel eus 9.4openexr-debugsource0:3.1.1-2.el9_4.3
Red Hat rhel eus 9.4openexr-devel0:3.1.1-2.el9_4.3
Red Hat rhel eus 9.4openexr-libs0:3.1.1-2.el9_4.3
Red Hat rhel eus 9.4openexr-libs-debuginfo0:3.1.1-2.el9_4.3
Red Hat rhel eus 9.6openexr0:3.1.1-3.el9_6.2
Red Hat rhel eus 9.6openexr-debuginfo0:3.1.1-3.el9_6.2
Red Hat rhel eus 9.6openexr-debugsource0:3.1.1-3.el9_6.2
Red Hat rhel eus 9.6openexr-devel0:3.1.1-3.el9_6.2
Red Hat rhel eus 9.6openexr-libs0:3.1.1-3.el9_6.2
Red Hat rhel eus 9.6openexr-libs-debuginfo0:3.1.1-3.el9_6.2
Rocky Linux 10openexr0:3.1.10-8.el10_2.2
Rocky Linux 10openexr0:3.1.10-8.el10_1.2
Rocky Linux 9openexr0:3.1.1-3.el9_7.2
Ubuntu 25.10openexrno fix
Ubuntu 26.10openexrno fix
Ubuntu Pro 16.04 LTSopenexr2.2.0-10ubuntu2.6+esm4
Ubuntu Pro 18.04 LTSopenexr2.2.0-11.1ubuntu1.9+esm1
Ubuntu Pro 20.04 LTSopenexr2.3.0-6ubuntu0.5+esm2
Ubuntu Pro 22.04 LTSopenexr2.5.7-1ubuntu0.1~esm2
Ubuntu Pro 24.04 LTSopenexr3.1.5-5.1ubuntu0.1~esm1
Ubuntu Pro 26.04 LTSopenexr3.1.13-2ubuntu0.26.04.1~esm1
openSUSE Leap 16.0openexr3.2.2-160000.6.1
openSUSE Tumbleweedopenexr3.4.9-1.1