CVE-2026-34545 | AcademySoftwareFoundation OpenEXR up to 3.4.6 EXR File Parser heap-based overflow (GHSA-ghfj-fx47-wg97)

April 2, 2026 Yanac

A vulnerability identified as critical has been detected in AcademySoftwareFoundation OpenEXR up to 3.4.6. This vulnerability affects unknown code of the component EXR File Parser. The manipulation leads to heap-based buffer overflow.

This vulnerability is uniquely identified as CVE-2026-34545. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More