Heap-Buffer-Overflow Vulnerability in OpenEXR Reference Implementation by Academy Software Foundation

CVE-2026-45696

What is CVE-2026-45696?

The OpenEXR reference implementation contains a vulnerability in the HTJ2K decoder, specifically in the ht_undo_impl() function, which could lead to a heap-buffer-overflow READ. This issue arises when the function processes decoded pixel data without proper validation of the declared width against the actual line buffer length, allowing crafted EXR files to trigger a 4-byte overflow. Such exploitation results in a deterministic crash (Denial of Service) and potential adjacent-heap memory leakage, affecting applications that open untrusted EXR files, including various thumbnailers and asset pipelines. The vulnerability has been addressed in version 3.4.12.

References