CVE-2026-68515 - OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union
Brief
CVE ID : CVE-2026-68515
Published : Aug. 25, 2026, 8:17 p. m.
- 55 minutes ago
Description : OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.
- 11, 3.
- 0 through 3.
- 12, and 3.
- 0 through 3.
- 13, exrmultiview can write past a heap allocation when it combines two attacker-supplied, individually valid scanline EXR files whose union dataWindow is not aligned to one view's channel subsampling. The utility allocates sampled channel storage using a truncated union_width / xSampling, then reads the sampled input through a Slice based on the misaligned union window, producing a heap out-of-bounds write.
The trigger is normal public-tool processing, such as exrmultiview left A. exr right B. exr out.