Search
Find merged stories by title or summary.
cve-2026-55373
OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts
CVE-2026-55373 - OpenEXR: OpenEXRUtil SampleCountChannel endEdit() can loop forever on UINT_MAX sample counts
CVE ID : CVE-2026-55373 Published : Aug. 25, 2026, 12:39 a. m. • 32 minutes ago Description : OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3. 2. 10, 3. 3. 12, and 3. 4. 13 contain an infinite-loop vulnerability in SampleCountChannel. The helper roundListSizeUp() rounds a sample-list size up to the next power of two using repeated unsigned left shifts, which terminates for normal values but fails for UINT_MAX: the sequence reaches 0x80000000, and the next left shift wraps the 32-bit value to 0. Because 0 remains less than UINT_MAX, the loop never progresses and never exits.
You've reached the end of current stories for this search.
