If you learned from my posts, inspired, or encouraged to grow in the cybersecurity and digital forensics, I would really appreciate your vote and support - Husam Shbib!
MyCyberNews

Search

Find merged stories by title or summary.

Vulnerabilities & Patches
Emerging1 src

CVE-2026-68515 - OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union

CVE ID : CVE-2026-68515 Published : Aug. 25, 2026, 8:17 p. m. • 55 minutes ago Description : OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3. 2. 11, 3. 3. 0 through 3. 3. 12, and 3. 4. 0 through 3. 4. 13, exrmultiview can write past a heap allocation when it combines two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view's channel subsampling. The utility allocates sampled channel storage using a truncated union_width / xSampling, then reads the sampled input through a Slice based on the misaligned union window, producing a heap out-of-bounds write. The trigger is normal public-tool processing, such as exrmultiview left A. exr right B. exr out.

·CVEFeed
Read →

You've reached the end of current stories for this search.