CVE-2026-59186

Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.11 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13

Description A heap out-of-bounds write occurs on 32-bit/ILP32 builds when processing a crafted tiled EXR file via the TiledRgbaInputFile RGBA API. The issue arises when a file contains a small 40x40 dataWindow but a large 65537x65537 tile size, causing the Array2D<Rgba> tile-conversion buffer size calculation to overflow. This results in the allocation of an undersized heap buffer, leading to a write operation that exceeds the allocated memory during tile decoding.

Recommendations Update to version 3.2.11. Update to version 3.3.13. Update to version 3.4.14.