CVE-2026-41142

OpenEXR is Vulnerable to Integer overflow in ImageChannel::resize leads to heap OOB write via OpenEXRUtil public API

HIGH

8.8

CVSS Score

Published: May 7, 2026 at 03:58 AM UTC

Updated: October 26, 2026 at 07:10 PM UTC

2 products affected across 2 vendorsOpenexrOpenexr

Using openexr by AcademySoftwareFoundation?

Get instant alerts when new vulnerabilities affect openexr - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, there is an integer overflow in ImageChannel::resize that leads to heap OOB write via OpenEXRUtil public API. This issue has been patched in versions 3.2.9, 3.3.11, and 3.4.11.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Openexr · Openexr

95%

3.0.0 ≤ v < 3.2.93.3.0 ≤ v < 3.3.113.4.0 ≤ v < 3.4.11

Affected range stops below 3.2.9, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.3.11, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.4.11, so it looks safe — our inference, not a vendor statement

Openexr · Academysoftwarefoundation

90%

3.0.0 ≤ v < 3.2.93.3.0 ≤ v < 3.3.113.4.0 ≤ v < 3.4.11

Affected range stops below 3.2.9, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.3.11, so it looks safe — our inference, not a vendor statement

Affected range stops below 3.4.11, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (12)

x_refsource_CONFIRMExploitVendor Advisory

Source: cverecord

https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-m25w-72cj-q6mg

x_refsource_MISCIssue TrackingPatch

Source: cverecord

https://github.com/AcademySoftwareFoundation/openexr/pull/2367

x_refsource_MISCPatch

Source: cverecord

https://github.com/AcademySoftwareFoundation/openexr/commit/0592ee539f33c122c90f09238579b902d838afb4