{"id":"CVE-2026-34544","title":"OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing (CVE-2026-34544)","summary":"A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker or local user could exploit this vulnerability by providing a specially crafted B44 or B44A EXR file. This crafted file can cause an ou…","severity":"medium","cvss":6.6,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H","cvssSource":"vendor","cwe":"CWE-787","vendor":"Red Hat","product":"Red Hat Enterprise Linux AppStream (v. 10)","affected":["enterprise_linux 6","enterprise_linux 9","enterprise_linux_appstream_v_10","enterprise_linux_codeready_linux_builder_v_10"],"patched":["enterprise_linux_appstream_v_10","enterprise_linux_codeready_linux_builder_v_10"],"published":"2026-04-01","updated":"2026-10-19","sourceUpdated":"2026-10-19T11:59:35+00:00","source":"CSAF","sourceUrl":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34544.json","references":[{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34544.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-34544"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2454127"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-34544"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-34544"},{"url":"https://github.com/AcademySoftwareFoundation/openexr/commit/35e7aa35e22c1975606be86e859f31cc1fc598ee"},{"url":"https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.8"},{"url":"https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-h762-rhv3-h25v"},{"url":"https://access.redhat.com/errata/RHSA-2026:84796"},{"url":"https://github.com/AcademySoftwareFoundation/openexr"}],"tags":["csaf","vex","red-hat","osv","pip"],"epss":0.00244,"epssPercentile":0.15507,"aliases":["GHSA-h762-rhv3-h25v","PYSEC-2026-2847"],"ecosystem":"pip","ingestedAt":"2026-07-13T18:57:58.989Z","slug":"CVE-2026-34544","body":"## Overview\n\nA flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker or local user could exploit this vulnerability by providing a specially crafted B44 or B44A EXR file. This crafted file can cause an out-of-bounds write during file decoding, which may lead to memory corruption and potentially arbitrary code execution or, most likely, an application crash (Denial of Service).\n\n## Vendor advisories\n\n- **RHSA-2026:84796** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-10-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:84796)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · updated 2026-10-19 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34544.json)\n\n**OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing** — rated Moderate by Red Hat. Released 2026-04-01, updated 2026-10-19.\n\nAffected:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 9\n\nFixed:\n\n- Red Hat Enterprise Linux AppStream (v. 10)\n- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\n\nNo fix planned:\n\n- Red Hat Enterprise Linux 6\n- Red Hat Enterprise Linux 9\n\nNot affected:\n\n- Red Hat Enterprise Linux 7\n- Red Hat Enterprise Linux 8\n\n## Remediation\n\nFor details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:84796\n\nWorkarounds / mitigations:\n\n- To mitigate this issue, avoid processing untrusted B44 or B44A EXR image files with applications linked against the OpenEXR library. Restricting the source of EXR files to trusted origins can reduce the risk of exploitation.\n\n## Package advisory (CVE-2026-34544)\n\nAffected packages:\n\n- `openexr >= 3.4.0, < 3.4.8`\n- `openexr >= 3.3.0, <= 3.3.8`\n- `openexr >= 3.2.0, <= 3.2.6`\n\nPatched in:\n\n- `openexr 3.4.8`\n\nSource: https://osv.dev/vulnerability/GHSA-h762-rhv3-h25v","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":36.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":224873,"id":"CVE-2026-34544","ts":1792411600322,"field":"cvss","old":null,"new":"6.6"},{"seq":224872,"id":"CVE-2026-34544","ts":1792411600322,"field":"severity","old":"high","new":"medium"}]}