PT-2026-30658 · Openexr · Openexr

Pwn2Woot · Publicado 2026-04-06 · Atualizado 2026-06-01 · CVE-2026-34379

Positive Technologies (AI Summary) · Pt

CVSS v3.1

7.1

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions OpenEXR versões 3.2.0 através de 3.2.6, versão 3.3.9 e versão 3.4.9

Description Um problema de escrita de memória existe na função LossyDctDecoder execute() dentro de src/lib/OpenEXRCore/internal dwa decoder.h:749 ao decodificar arquivos EXR compactados DWA ou DWAB com canais do tipo FLOAT. O decodificador converte um ponteiro uint8 t * linha desalinhado para float * e grava através dele, levando a um comportamento indefinido em arquiteturas que impõem alinhamento (ARM, RISC-V, etc.). Embora tolerado silenciosamente no x86, permanece explorável por meio de otimizações do compilador.

Recommendations Atualize para a versão OpenEXR 3.2.7 ou posterior. Atualize para a versão OpenEXR 3.3.9 ou posterior. Atualize para a versão OpenEXR 3.4.9 ou posterior.

Correção

Memory Corruption

Incorrect Type Conversion or Cast

Type Confusion

Enumeração de Fraquezas

CWE-787

CWE-704

CWE-843

Identificadores relacionados

CVE-2026-34379

ECHO-4DD0-0410-16F9

OESA-2026-1840

OESA-2026-1841

OESA-2026-1842

OESA-2026-1843

OPENSUSE-SU-2026:10505-1

OPENSUSE-SU-2026:20605-1

Produtos afetados

Openexr

Referências · 42

• https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.3.9 · Nota
• https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.4.9 · Nota
• https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.2.7 · Nota
• https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-w88v-vqhq-5p24 · Aviso do Fabricante
• https://github.com/AcademySoftwareFoundation/openexr/commit/d32ffe9d3727c0474b63e91556baf61ced3d89e0 · Nota
• https://github.com/AcademySoftwareFoundation/openexr/pull/2324 · Nota
• https://github.com/AcademySoftwareFoundation/openexr/commit/76af7d7508819a477f2cbce808ee975da8053ce3 · Nota
• https://github.com/AcademySoftwareFoundation/openexr/commit/3ad9b29430f9c2599dad113e1efe619a6ec7ba67 · Nota
• https://suse.com/security/cve/CVE-2026-34379 · Nota
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1841 · Nota
• https://bugzilla.suse.com/1261624 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-34588 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-34589 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-34379 · Aviso do Fabricante
• https://bugzilla.suse.com/1261634 · Nota