NULL Pointer Dereference in OpenEXR High-Dynamic-Range Image Format by Academy Software Foundation

CVE-2026-55371

What is CVE-2026-55371?

The OpenEXR high-dynamic-range image file format, widely utilized in the motion picture industry, has a vulnerability that affects multiple versions. In the affected versions, a NULL pointer dereference occurs in the OpenEXRCore function exr_attr_set_bytes(). This issue arises when a positive hint_length is provided alongside a NULL type_hint. Consequently, when the exr_attr_bytes_create() function attempts to allocate a type-hint buffer, it leads to a crash due to an attempt to copy from the NULL pointer. This vulnerability can be exploited through the public OpenEXRCore C API, resulting in potential denial of service. The problem has been resolved in version 3.4.13.

References