OpenEXR vulnerabilities

4 known vulnerabilities in OpenEXR from Academy Software Foundation. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  OpenEXR: Heap-based Buffer Overflow

  CVE-2025-12840Dec 23, 2025Academy Software Foundation

  Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User int

• 7.8 High severity

  OpenEXR: Heap-based Buffer Overflow

  CVE-2025-12839Dec 23, 2025Academy Software Foundation

  Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User int

• 7.8 High severity

  OpenEXR: Heap-based Buffer Overflow

  CVE-2025-12495Dec 23, 2025Academy Software Foundation

  Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User int

• 9.1 Critical severity

  OpenEXR: Out-of-bounds Write

  CVE-2023-5841Feb 1, 2024Academy Software FoundationEPSS 1.25%

  Due to a failure in validating the number of scanline samples of a OpenEXR file containing deep scanline data, Academy Software Foundation OpenEX image parsing library version 3.2.1 and prior is susceptible to a heap-based buffer overflow vulnerability. This i