CVE-2026-65979

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.4.0 through 3.4.12

Description The HTJ2K decoder fails to verify if the header-length field PLEN parsed from a chunk's compressed data fits within the available buffer. During decoding, the codestream pointer is advanced by the size specified in PLEN and passed to the OpenJPH memory-input path. A crafted value in this field can push the pointer beyond the buffer boundary, resulting in an out-of-bounds read when processing untrusted files.

Recommendations Update to version 3.4.13.