---
id: CVE-2026-34544
title: >-
  OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file
  processing (CVE-2026-34544)
summary: >-
  A flaw was found in OpenEXR, an image storage format for the motion picture
  industry. A remote attacker or local user could exploit this vulnerability by
  providing a specially crafted B44 or B44A EXR file. This crafted file can
  cause an ou…
severity: medium
cvss: 6.6
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H'
cvssSource: vendor
cwe: CWE-787
vendor: Red Hat
product: Red Hat Enterprise Linux AppStream (v. 10)
affected:
  - enterprise_linux 6
  - enterprise_linux 9
  - enterprise_linux_appstream_v_10
  - enterprise_linux_codeready_linux_builder_v_10
patched:
  - enterprise_linux_appstream_v_10
  - enterprise_linux_codeready_linux_builder_v_10
published: '2026-04-01'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T11:59:35+00:00'
source: CSAF
sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34544.json'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34544.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-34544'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2454127'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-34544'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-34544'
  - url: >-
      https://github.com/AcademySoftwareFoundation/openexr/commit/35e7aa35e22c1975606be86e859f31cc1fc598ee
  - url: 'https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.8'
  - url: >-
      https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-h762-rhv3-h25v
  - url: 'https://access.redhat.com/errata/RHSA-2026:84796'
  - url: 'https://github.com/AcademySoftwareFoundation/openexr'
tags:
  - csaf
  - vex
  - red-hat
  - osv
  - pip
epss: 0.00244
epssPercentile: 0.15507
aliases:
  - GHSA-h762-rhv3-h25v
  - PYSEC-2026-2847
ecosystem: pip
ingestedAt: '2026-07-13T18:57:58.989Z'
---

## Overview

A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker or local user could exploit this vulnerability by providing a specially crafted B44 or B44A EXR file. This crafted file can cause an out-of-bounds write during file decoding, which may lead to memory corruption and potentially arbitrary code execution or, most likely, an application crash (Denial of Service).

## Vendor advisories

- **RHSA-2026:84796** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) · released 2026-10-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:84796)
- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 9 · updated 2026-10-19 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34544.json)

**OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing** — rated Moderate by Red Hat. Released 2026-04-01, updated 2026-10-19.

Affected:

- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 9

Fixed:

- Red Hat Enterprise Linux AppStream (v. 10)
- Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)

No fix planned:

- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 9

Not affected:

- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8

## Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:84796

Workarounds / mitigations:

- To mitigate this issue, avoid processing untrusted B44 or B44A EXR image files with applications linked against the OpenEXR library. Restricting the source of EXR files to trusted origins can reduce the risk of exploitation.

## Package advisory (CVE-2026-34544)

Affected packages:

- `openexr >= 3.4.0, < 3.4.8`
- `openexr >= 3.3.0, <= 3.3.8`
- `openexr >= 3.2.0, <= 3.2.6`

Patched in:

- `openexr 3.4.8`

Source: https://osv.dev/vulnerability/GHSA-h762-rhv3-h25v