Medium [CVE-2026-59984] Denial of service and memory corruption via crafted B44-compressed EXR
This medium-severity Red Hat Linux advisory covers CVE-2026-59984.
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Summary
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.1.0 through 3.2.10, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 are vulnerable on ILP32 builds to an out-of-bounds write.
When a crafted B44-compressed scanline EXR causes the logical scratch size to truncate before allocation and uncompress_b44_impl() writes using the attacker-controlled channel width, allowing denial of service and memory corruption. This issue is fixed in versions 3.2.11, 3.3.13, and 3.4.14.
A flaw was found in OpenEXR. When processing a specially crafted B44-compressed EXR image, an out-of-bounds write can occur due to an integer truncation vulnerability in ILP32 builds.
This vulnerability only affects 32-bit ILP32 builds; 64-bit LP64 builds are not vulnerable. Red Hat Enterprise Linux 9 and later, as well as RHIVOS, ship only 64-bit builds and are therefore not affected by this flaw.
When exploited on vulnerable 32-bit builds, this issue can lead to denial of service or memory corruption. Red Hat severity: Moderate — CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).
Weakness: CWE-787.
- 3.1.0
- 3.2.10
- 3.3.0
- 3.3.12
- 3.4.0
- 3.4.13
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
- 3.2.11
- 3.3.13
- 3.4.14
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Mitigation checklist
- Red Hat ships this component only on 64-bit architectures where this vulnerability does not apply. No mitigation is necessary for Red Hat products.
Official advisory · high-confidence parse· fetched 2 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.