CVE-2026-41142

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.0.0 through 3.2.8 OpenEXR versions 3.3.0 through 3.3.10 OpenEXR versions 3.4.0 through 3.4.10

Description An integer overflow exists in the ImageChannel::resize() function, which can lead to a heap out-of-bounds (OOB) write—a condition where data is written outside the boundaries of the allocated memory buffer—via the OpenEXRUtil public API.

Recommendations Update to version 3.2.9 Update to version 3.3.11 Update to version 3.4.11