PT-2026-29620 · Openexr · Openexr

Cary Phillips · Publicado 2026-04-01 · Atualizado 2026-06-01 · CVE-2026-34543

Positive Technologies (AI Summary) · Pt

CVSS v4.0

8.7

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OpenEXR versões 3.4.0 através de 3.4.7

Description OpenEXR, um formato de armazenamento de imagem usado na indústria cinematográfica, pode divulgar informações confidenciais da memória heap através dos dados de pixel decodificados. Esta divulgação de informações ocorre ao processar um arquivo EXR malicioso nas configurações padrão, sem exigir interação do usuário.

Recommendations Atualize para a versão 3.4.8 ou posterior.

Exploit

Correção

Use of Uninitialized Resource

Enumeração de Fraquezas

CWE-908

Identificadores relacionados

CVE-2026-34543

ECHO-DD0B-5DB3-5ACE

GHSA-VC68-257W-M432

OPENSUSE-SU-2026:10505-1

Produtos afetados

Openexr

Referências · 24

• 🔥 https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-vc68-257w-m432 · Exploit
• https://github.com/AcademySoftwareFoundation/openexr/commit/5f6d0aaa9e43802917af7db90f181e88e083d3b8 · Correção
• https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.8 · Nota
• https://github.com/AcademySoftwareFoundation/openexr · Nota
• https://suse.com/security/cve/CVE-2026-34379 · Nota
• https://suse.com/security/cve/CVE-2026-34380 · Nota
• https://twitter.com/CVEnew/status/2039647759876456572 · Publicação no Twitter
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34543 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-34589 · Nota
• https://docs.bell-sw.com/security/cves/CVE-2026-34543 · Nota
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-34543 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-34543 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-vc68-257w-m432 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2026-34545 · Nota
• https://ubuntu.com/security/CVE-2026-34543 · Aviso do Fabricante