OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API

OpenEXR has a signed 32-bit Overflow in PIZ Decoder Leads to OOB Read/Write

OpenEXR CompositeDeepScanLine integer-overflow leads to heap OOB write

OpenEXR has buffer overflow in PyOpenEXR_old's channels() and channel()

OpenEXR's Forged Unpacked Size can Lead to Heap-Based Buffer Overflow in Deep Scanline Parsing

OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)

OpenEXR has use after free in PyObject_StealAttrString

OpenEXR Makes Use of Uninitialized Memory

OpenEXR: integer overflow to OOB write in uncompress_b44_impl()

OpenEXR: integer overflow lead to OOB in HTJ2K decoder

OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow

OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union

OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision

OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin

OpenEXR: exrmetrics deep pixelmode heap buffer overflow

OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds

OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)

OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow

OpenEXR has integer overflow in DWA decoder outBufferEnd pointer arithmetic (missed variant of CVE-2026-34589)

OpenEXR has integer overflow in DWA setupChannelData planarUncRle pointer arithmetic (missed variant of CVE-2026-34589)

OpenEXR has a misaligned write in LossyDctDecoder_execute leading to undefined behavior (DWA/DWAB decompression)